X-Git-Url: https://gitweb.ps.run/chirp/blobdiff_plain/f3f8c8b971b7b8dcb2f391ab61dfd1f03da8da9e..refs/heads/refactor:/src/main.zig

diff --git a/src/main.zig b/src/main.zig
index f8113dc..460ea4c 100644
--- a/src/main.zig
+++ b/src/main.zig
@@ -6,18 +6,34 @@ const http = @import("http");
 // db {{{
 
 const Db = struct {
-    fn users(txn: lmdb.Txn) !db.Db(UserId, User) {
-        return try db.Db(UserId, User).init(txn, "users");
-    }
-    fn user_ids(txn: lmdb.Txn) !db.Db(Username, UserId) {
-        return try db.Db(Username, UserId).init(txn, "user_ids");
-    }
-    fn sessions(txn: lmdb.Txn) !db.Db(SessionToken, UserId) {
-        return try db.Db(SessionToken, UserId).init(txn, "sessions");
-    }
-    fn posts(txn: lmdb.Txn) !db.Db(PostId, Post) {
-        return try db.Db(PostId, Post).init(txn, "posts");
+    pub fn init(env: lmdb.Env) !void {
+        const txn = try env.txn();
+        const dbi = try txn.dbi(null);
+        if (try dbi.has(1001)) {
+            users = try dbi.get(1001, @TypeOf(users));
+        } else {
+            users = try @TypeOf(users).init(txn);
+        }
+        if (try dbi.has(1002)) {
+            user_ids = try dbi.get(1002, @TypeOf(user_ids));
+        } else {
+            user_ids = try @TypeOf(user_ids).init(txn);
+        }
+        if (try dbi.has(1003)) {
+            sessions = try dbi.get(1003, @TypeOf(sessions));
+        } else {
+            sessions = try @TypeOf(sessions).init(txn);
+        }
+        if (try dbi.has(1004)) {
+            posts = try dbi.get(1004, @TypeOf(posts));
+        } else {
+            posts = try @TypeOf(posts).init(txn);
+        }
     }
+    var users: UserList = undefined;
+    var user_ids: UsernameList = undefined;
+    var sessions: SessionList = undefined;
+    var posts: PostList = undefined;
 };
 
 // }}}
@@ -29,10 +45,16 @@ const User = struct {
     id: UserId,
     name: Username,
     display_name: DisplayName,
+    description: UserDescription,
     password_hash: PasswordHash,
-    posts: PostList,
-    following: UserList,
-    followers: UserList,
+
+    posts: PostSet,
+
+    following: UserSet,
+    followers: UserSet,
+
+    post_lists: PostListList,
+    feeds: UserListList,
 };
 
 const Post = struct {
@@ -46,12 +68,21 @@ const Post = struct {
     upvotes: u64 = 0,
     downvotes: u64 = 0,
     votes: VoteList,
-    comments: PostList,
-    quotes: PostList,
+    comments: PostSet,
+    quotes: PostSet,
 
     text: PostText,
 };
 
+const SavedPostList = struct {
+    name: Name,
+    list: PostSet,
+};
+const SavedUserList = struct {
+    name: Name,
+    list: UserSet,
+};
+
 const Vote = struct {
     const Kind = enum { Up, Down };
 
@@ -64,26 +95,34 @@ const Login = struct {
     user: User,
     session_token: SessionToken,
 };
+const Name = std.BoundedArray(u8, 32);
 const UserId = enum(u64) { _ };
 const PostId = enum(u64) { _ };
 const Timestamp = i64;
-const Username = std.BoundedArray(u8, 16);
+const Username = std.BoundedArray(u8, 32);
 const DisplayName = std.BoundedArray(u8, 64);
+const UserDescription = std.BoundedArray(u8, 1024);
 const PasswordHash = std.BoundedArray(u8, 128);
 const SessionToken = u64;
 const CookieValue = std.BoundedArray(u8, 128);
 const PostText = std.BoundedArray(u8, 1024);
-const PostList = db.Set(PostId);
-const UserList = db.Set(UserId);
+const PostSet = db.Set(PostId);
+const UserSet = db.Set(UserId);
+const PostList = db.SetList(PostId, Post);
+const UserList = db.SetList(UserId, User);
+const UsernameList = db.SetList(Username, UserId);
+const SessionList = db.SetList(SessionToken, UserId);
 const VoteList = db.SetList(UserId, Vote);
+const PostListList = db.List(SavedPostList);
+const UserListList = db.List(SavedUserList);
 
 fn parse_enum(comptime E: type, buf: []const u8, base: u8) !E {
-    return @enumFromInt(try std.fmt.parseUnsigned(@typeInfo(E).Enum.tag_type, buf, base));
+    return @enumFromInt(try std.fmt.parseUnsigned(@typeInfo(E).@"enum".tag_type, buf, base));
 }
 
 // https://developer.mozilla.org/en-US/docs/Glossary/Percent-encoding
-fn reencode(text: []const u8) !PostText {
-    var result = try PostText.init(0);
+fn reencode(comptime T: type, text: []const u8) !T {
+    var result = try T.init(0);
 
     const len = @min(text.len, 1024); // TODO: PostText length
 
@@ -92,28 +131,19 @@ fn reencode(text: []const u8) !PostText {
         const c = text[idx];
         if (c == '+') {
             try result.append(' ');
-        } else if (c == '%') {
-            // special case of &#...
-            // assume only &#, no &#x
-            if (idx + 6 < text.len and std.mem.eql(u8, text[idx .. idx + 6], "%26%23")) {
-                const num_start = idx + 6;
-                var num_end = num_start;
-                while (num_end < text.len and std.ascii.isDigit(text[num_end])) {
-                    num_end += 1;
-                }
+        } else if (c == '%' and idx + 2 < text.len) {
+            const allow = &[_]u8{ 0x26, 0x23, 0x3b, 0x0a };
 
-                if (num_end + 2 < text.len and
-                    text[num_end] == '%' and
-                    text[num_end + 1] == '3' and
-                    std.ascii.toLower(text[num_end + 2]) == 'b')
-                {
-                    try std.fmt.format(result.writer(), "&#{s};", .{text[num_start..num_end]});
-                    idx = num_end + 2;
-                    continue;
-                }
+            const escaped_value = std.fmt.parseUnsigned(u8, text[idx + 1 .. idx + 3], 16) catch continue;
+
+            if (escaped_value == 0x0d) {
+                try std.fmt.format(result.writer(), "<br />", .{});
+            } else if (std.mem.indexOfScalar(u8, allow, escaped_value) != null) {
+                try std.fmt.format(result.writer(), "{c}", .{escaped_value});
+            } else {
+                try std.fmt.format(result.writer(), "&#x{x};", .{escaped_value});
             }
 
-            try std.fmt.format(result.writer(), "&#x{s};", .{text[idx + 1 .. idx + 3]});
             idx += 2;
         } else {
             try result.append(c);
@@ -123,8 +153,8 @@ fn reencode(text: []const u8) !PostText {
     return result;
 }
 
-fn decode(text: []const u8) !std.BoundedArray(u8, 32) {
-    var result = try std.BoundedArray(u8, 32).init(0);
+fn decode(text: []const u8) !std.BoundedArray(u8, 1024) {
+    var result = try std.BoundedArray(u8, 1024).init(0);
 
     const max_len = @min(text.len, 1024); // TODO: PostText length
 
@@ -151,18 +181,20 @@ fn decode(text: []const u8) !std.BoundedArray(u8, 32) {
 }
 
 const Chirp = struct {
+    const PostsPerPage = 10;
+    const UsersPerPage = 10;
+    var HashBuffer = std.mem.zeroes([1024 * 1024 * 50]u8);
+
     pub fn hash_password(password: []const u8) !PasswordHash {
         var hash_buffer = try PasswordHash.init(128);
 
         // TODO: choose buffer size
-        // TODO: dont allocate on stack, maybe zero memory?
-        var buffer: [1024 * 10]u8 = undefined;
-        var alloc = std.heap.FixedBufferAllocator.init(&buffer);
+        var alloc = std.heap.FixedBufferAllocator.init(&HashBuffer);
 
         // TODO: choose limits
         const result = try std.crypto.pwhash.argon2.strHash(password, .{
             .allocator = alloc.allocator(),
-            .params = std.crypto.pwhash.argon2.Params.fromLimits(1000, 1024),
+            .params = std.crypto.pwhash.argon2.Params.owasp_2id,
         }, hash_buffer.slice());
 
         try hash_buffer.resize(result.len);
@@ -171,8 +203,7 @@ const Chirp = struct {
     }
 
     pub fn verify_password(password: []const u8, hash: PasswordHash) bool {
-        var buffer: [1024 * 10]u8 = undefined;
-        var alloc = std.heap.FixedBufferAllocator.init(&buffer);
+        var alloc = std.heap.FixedBufferAllocator.init(&HashBuffer);
 
         if (std.crypto.pwhash.argon2.strVerify(hash.constSlice(), password, .{
             .allocator = alloc.allocator(),
@@ -184,39 +215,44 @@ const Chirp = struct {
         }
     }
 
-    pub fn register_user(env: *lmdb.Env, username: []const u8, password: []const u8) !bool {
+    pub fn register_user(env: lmdb.Env, username: []const u8, password: []const u8) !bool {
         const username_array = try Username.fromSlice(username);
         const display_name = try DisplayName.fromSlice(username);
 
         const txn = try env.txn();
-        defer txn.commit() catch {};
+        defer txn.commit() catch |err| {
+            std.debug.print("error registering user: {}\n", .{err});
+        };
 
-        const users = try Db.users(txn);
-        const user_ids = try Db.user_ids(txn);
+        var users = try Db.users.open(txn);
+        var user_ids = try Db.user_ids.open(txn);
 
         if (try user_ids.has(username_array)) {
             return false;
         } else {
-            const user_id = try db.Prng.gen(users.dbi, UserId);
+            const user_id = try db.Prng.gen(users.base.dbi, UserId);
 
-            try users.put(user_id, User{
+            try users.append(user_id, User{
                 .id = user_id,
                 .name = username_array,
                 .display_name = display_name,
+                .description = try UserDescription.init(0),
                 .password_hash = try hash_password(password),
-                .posts = try PostList.init(txn),
-                .following = try UserList.init(txn),
-                .followers = try UserList.init(txn),
+                .posts = try PostSet.init(txn),
+                .following = try UserSet.init(txn),
+                .followers = try UserSet.init(txn),
+                .post_lists = try PostListList.init(txn),
+                .feeds = try UserListList.init(txn),
             });
 
-            try user_ids.put(username_array, user_id);
+            try user_ids.append(username_array, user_id);
 
             return true;
         }
     }
 
     pub fn login_user(
-        env: *lmdb.Env,
+        env: lmdb.Env,
         username: []const u8,
         password: []const u8,
     ) !SessionToken {
@@ -225,32 +261,32 @@ const Chirp = struct {
         const txn = try env.txn();
         defer txn.commit() catch {};
 
-        const user_ids = try Db.user_ids(txn);
+        const user_ids = try Db.user_ids.open(txn);
         const user_id = try user_ids.get(username_array);
         std.debug.print("user logging in, id: {}\n", .{user_id});
 
-        const users = try Db.users(txn);
+        const users = try Db.users.open(txn);
         const user = try users.get(user_id);
 
         if (verify_password(password, user.password_hash)) {
-            const sessions = try Db.sessions(txn);
-            const session_token = try db.Prng.gen(sessions.dbi, SessionToken);
-            try sessions.put(session_token, user_id);
+            var sessions = try Db.sessions.open(txn);
+            const session_token = try db.Prng.gen(sessions.base.dbi, SessionToken);
+            try sessions.append(session_token, user_id);
             return session_token;
         } else {
             return error.IncorrectPassword;
         }
     }
 
-    fn logout_user(env: *lmdb.Env, session_token: SessionToken) !void {
+    fn logout_user(env: lmdb.Env, session_token: SessionToken) !void {
         const txn = try env.txn();
         defer txn.commit() catch {};
 
-        const sessions = try Db.sessions(txn);
+        var sessions = try Db.sessions.open(txn);
         try sessions.del(session_token);
     }
 
-    fn append_post(env: *lmdb.Env, user_id: UserId, post_list: PostList, parent_id: ?PostId, quote_id: ?PostId, text: []const u8) !void {
+    fn append_post(env: lmdb.Env, user_id: UserId, post_list: PostSet, parent_id: ?PostId, quote_id: ?PostId, text: []const u8) !PostId {
         var post_id: PostId = undefined;
 
         // TODO: do this in one commit
@@ -261,10 +297,10 @@ const Chirp = struct {
             txn = try env.txn();
             defer txn.commit() catch {};
 
-            const posts = try Db.posts(txn);
+            const posts = try Db.posts.open(txn);
             post_id = try db.Prng.gen(posts.dbi, PostId);
 
-            const decoded_text = try reencode(text);
+            const decoded_text = try reencode(PostText, text);
             try posts.put(post_id, Post{
                 .id = post_id,
                 .parent_id = parent_id,
@@ -272,8 +308,8 @@ const Chirp = struct {
                 .user_id = user_id,
                 .time = std.time.timestamp(),
                 .votes = try VoteList.init(txn),
-                .comments = try PostList.init(txn),
-                .quotes = try PostList.init(txn),
+                .comments = try PostSet.init(txn),
+                .quotes = try PostSet.init(txn),
                 .text = decoded_text,
             });
         }
@@ -284,58 +320,64 @@ const Chirp = struct {
             defer txn.commit() catch {};
 
             var posts_view = try post_list.open(txn);
-            try posts_view.append(post_id, {});
+            try posts_view.append(post_id);
         }
 
         if (quote_id != null) {
             txn = try env.txn();
             defer txn.commit() catch {};
 
-            const posts = try Db.posts(txn);
+            const posts = try Db.posts.open(txn);
             const quote_post = try posts.get(quote_id.?);
             var quotes = try quote_post.quotes.open(txn);
-            try quotes.append(post_id, {});
+            try quotes.append(post_id);
         }
-    }
 
-    fn post(env: *lmdb.Env, user_id: UserId, text: []const u8) !void {
-        const txn = try env.txn();
+        return post_id;
+    }
 
-        const users = try Db.users(txn);
+    fn post(env: lmdb.Env, user_id: UserId, text: []const u8) !void {
+        var txn = try env.txn();
+        const users = try Db.users.open(txn);
         const user = try users.get(user_id);
-
         txn.abort();
 
-        try append_post(env, user_id, user.posts, null, null, text);
+        const post_id = try append_post(env, user_id, user.posts, null, null, text);
+        _ = post_id;
     }
 
-    fn comment(env: *lmdb.Env, user_id: UserId, parent_post_id: PostId, text: []const u8) !void {
-        const txn = try env.txn();
+    fn comment(env: lmdb.Env, user_id: UserId, parent_post_id: PostId, text: []const u8) !void {
+        var txn = try env.txn();
+        const users = try Db.users.open(txn);
+        const user = try users.get(user_id);
 
-        const posts = try Db.posts(txn);
+        const posts = try Db.posts.open(txn);
         const parent_post = try posts.get(parent_post_id);
-
         txn.abort();
 
-        try append_post(env, user_id, parent_post.comments, parent_post_id, null, text);
-    }
+        const post_id = try append_post(env, user_id, parent_post.comments, parent_post_id, null, text);
 
-    fn quote(env: *lmdb.Env, user_id: UserId, quote_post_id: PostId, text: []const u8) !void {
-        const txn = try env.txn();
+        txn = try env.txn();
+        var replies_view = try user.posts.open(txn);
+        try replies_view.append(post_id);
+        try txn.commit();
+    }
 
-        const users = try Db.users(txn);
+    fn quote(env: lmdb.Env, user_id: UserId, quote_post_id: PostId, text: []const u8) !void {
+        var txn = try env.txn();
+        const users = try Db.users.open(txn);
         const user = try users.get(user_id);
-
         txn.abort();
 
-        try append_post(env, user_id, user.posts, null, quote_post_id, text);
+        const post_id = try append_post(env, user_id, user.posts, null, quote_post_id, text);
+        _ = post_id;
     }
 
-    fn vote(env: *lmdb.Env, post_id: PostId, user_id: UserId, kind: Vote.Kind) !void {
+    fn vote(env: lmdb.Env, post_id: PostId, user_id: UserId, kind: Vote.Kind) !void {
         const txn = try env.txn();
         defer txn.commit() catch {};
 
-        const posts = try Db.posts(txn);
+        const posts = try Db.posts.open(txn);
 
         var p = try posts.get(post_id);
         var votes_view = try p.votes.open(txn);
@@ -371,11 +413,11 @@ const Chirp = struct {
         }
     }
 
-    fn follow(env: *lmdb.Env, user_id: UserId, user_id_to_follow: UserId) !void {
+    fn follow(env: lmdb.Env, user_id: UserId, user_id_to_follow: UserId) !void {
         const txn = try env.txn();
         defer txn.commit() catch {};
 
-        const users = try Db.users(txn);
+        const users = try Db.users.open(txn);
 
         const user = try users.get(user_id);
         const user_to_follow = try users.get(user_id_to_follow);
@@ -387,27 +429,27 @@ const Chirp = struct {
             try user_following.del(user_id_to_follow);
             try user_to_follow_followers.del(user_id);
         } else if (!(user_following.has(user_id_to_follow) catch true) and !(user_to_follow_followers.has(user_id) catch true)) {
-            try user_following.append(user_id_to_follow, {});
-            try user_to_follow_followers.append(user_id, {});
+            try user_following.append(user_id_to_follow);
+            try user_to_follow_followers.append(user_id);
         } else {
             std.debug.print("Something went wrong when trying to unfollow\n", .{});
         }
     }
 
-    fn get_session_user_id(env: *lmdb.Env, session_token: SessionToken) !UserId {
+    fn get_session_user_id(env: lmdb.Env, session_token: SessionToken) !UserId {
         const txn = try env.txn();
         defer txn.abort();
 
-        const sessions = try Db.sessions(txn);
+        const sessions = try Db.sessions.open(txn);
 
         return try sessions.get(session_token);
     }
 
-    fn get_user(env: *lmdb.Env, user_id: UserId) !User {
+    fn get_user(env: lmdb.Env, user_id: UserId) !User {
         const txn = try env.txn();
         defer txn.abort();
 
-        const users = try Db.users(txn);
+        const users = try Db.users.open(txn);
         return try users.get(user_id);
     }
 };
@@ -415,17 +457,86 @@ const Chirp = struct {
 // }}}
 
 // html {{{
-fn html_form(res: *http.Response, comptime fmt_action: []const u8, args_action: anytype, inputs: anytype) !void {
-    try res.write("<form action=\"", .{});
-    try res.write(fmt_action, args_action);
-    try res.write("\" method=\"post\">", .{});
+pub fn Paginate(comptime T: type) type {
+    return struct {
+        const Self = @This();
+
+        const IterateResult = T.Base.View.Iterator.Result;
+
+        res: *http.Response,
+        view: T.View,
+        per_page: u64,
+
+        it: T.Base.View.Iterator,
+        starting_idx: ?T.Base.Key,
+        count: u64 = 0,
+
+        pub fn init(res: *http.Response, view: T.View, per_page: u64) !Self {
+            var it = view.reverse_iterator();
+            if (res.req.get_param("starting_at")) |starting_at_str| {
+                it.idx = try parse_enum(T.Base.Key, starting_at_str, 16);
+            }
+
+            return .{
+                .res = res,
+                .view = view,
+                .per_page = per_page,
+                .it = it,
+                .starting_idx = it.idx,
+            };
+        }
+        pub fn next(self: *Self) ?IterateResult {
+            if (self.it.next()) |kv| {
+                if (self.count < self.per_page) {
+                    self.count += 1;
+                    return kv;
+                }
+            }
+            return null;
+        }
+        pub fn write_navigation(self: *Self) !void {
+            const next_idx = self.it.next();
+
+            if (self.view.base.head.last != self.starting_idx) {
+                var prev_it = self.view.iterator();
+                prev_it.idx = self.starting_idx.?;
+                var oldest_idx = self.starting_idx.?;
+
+                var count: u64 = 0;
+                while (prev_it.next()) |kv| {
+                    oldest_idx = kv.key;
+
+                    if (count > self.per_page) {
+                        break;
+                    } else {
+                        count += 1;
+                    }
+                }
+
+                try self.res.write("<a href=\"{s}?starting_at={x}\">Prev</a> ", .{ self.res.req.target, @intFromEnum(oldest_idx) });
+            }
+
+            if (next_idx) |kv| {
+                try self.res.write("<a href=\"{s}?starting_at={x}\">Next</a>", .{ self.res.req.target, @intFromEnum(kv.key) });
+            }
+        }
+    };
+}
+fn html_form(res: *http.Response, action: []const u8, inputs: anytype) !void {
+    try res.write("<form action=\"{s}\" method=\"post\">", .{action});
 
     inline for (inputs) |input| {
         switch (@typeInfo(@TypeOf(input))) {
-            .Struct => {
-                try res.write("<input ", .{});
-                try res.write(input[0], input[1]);
-                try res.write(" />", .{});
+            .@"struct" => |s| {
+                if (s.fields.len == 3) {
+                    try res.write("<{s} ", .{input[0]});
+                    try res.write(input[1], input[2]);
+                    try res.write("></{s}>", .{input[0]});
+                } else {
+                    try res.write("<input ", .{});
+                    try res.write(input[0], input[1]);
+                    try res.write(" />", .{});
+                }
             },
             else => {
                 try res.write("<input ", .{});
@@ -441,34 +552,7 @@ fn html_form(res: *http.Response, comptime fmt_action: []const u8, args_action:
 
 // write {{{
 const TimeStr = std.BoundedArray(u8, 256);
-// fn time_str(_t: i64) TimeStr {
-//     var result = TimeStr.init(0) catch unreachable;
-
-//     const nthSecond: u64 = @intCast(_t);
-//     const nthDay = nthSecond / std.time.s_per_day;
-//     const secondInDay = nthSecond - nthDay * std.time.s_per_day;
-//     const hourInDay = secondInDay / std.time.s_per_hour;
-//     const secondInHour = secondInDay % std.time.s_per_hour;
-//     const minuteInHour = secondInHour / 60;
-//     const secondInMinute = secondInDay % std.time.s_per_min;
-
-//     const nthYear = nthDay / 365; // maybe check
-//     const year = 1970 + nthYear;
-//     const leapdays = year / 4 - year / 100 + year / 400;
-//     const secondInYear = nthSecond - (nthYear * 365 + leapdays) * std.time.s_per_day;
-//     const dayInYear = secondInYear / std.time.s_per_day;
-
-//     std.fmt.format(result.writer(), "<time>{:0>2}:{:0>2}:{:0>2} {:0>2}.{:0>2}.{:0>4} UTC</time>", .{
-//         hourInDay,
-//         minuteInHour,
-//         secondInMinute,
-//         dayInYear,
-//         0,
-//         year,
-//     }) catch unreachable;
-
-//     return result;
-// }
+
 // http://howardhinnant.github.io/date_algorithms.html
 fn time_str(_t: i64) TimeStr {
     const t: u64 = @intCast(_t);
@@ -504,15 +588,9 @@ fn write_header(res: *http.Response, logged_in: ?Login) !void {
         try res.write(
             \\<a href="/post">Post</a><br />
         , .{});
-        try res.write(
-            \\<a href="/edit">Edit</a><br />
-        , .{});
-        try html_form(res, "/logout", .{}, .{
+        try html_form(res, "/logout", .{
             \\type="submit" value="Logout"
         });
-        try html_form(res, "/quit", .{}, .{
-            \\type="submit" value="Quit"
-        });
         try res.write("<br /><br />", .{});
     } else {
         try res.write(
@@ -521,17 +599,13 @@ fn write_header(res: *http.Response, logged_in: ?Login) !void {
             \\<input type="text" name="username" />
             \\<input type="password" name="password" />
             \\<input type="submit" value="Register" />
-            \\</form>
+            \\</form><br />
             \\<form action="/login" method="post">
             \\<input type="text" name="username" />
             \\<input type="password" name="password" />
             \\<input type="submit" value="Login" />
-            \\</form>
+            \\</form><br /><br />
         , .{});
-        try html_form(res, "/quit", .{}, .{
-            \\type="submit" value="Quit"
-        });
-        try res.write("<br /><br />", .{});
     }
 }
 fn write_start(res: *http.Response) !void {
@@ -540,22 +614,18 @@ fn write_start(res: *http.Response) !void {
         \\<html>
         \\<head>
         \\<link rel="icon" href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 100 100%22><text y=%22.9em%22 font-size=%2290%22>&#128035;</text></svg>">
+        \\<meta name="viewport" content="width=device-width, initial-scale=1.0" />
         \\<style>
-        \\  form {
-        \\    display: inline-block;
+        \\  :root {
+        \\    color-scheme: light dark;
         \\  }
-        \\  .toggle > form > input:placeholder-shown {
-        \\    display: none;
-        \\  }
-        \\  .toggle:hover > form > input {
+        \\  form {
         \\    display: inline-block;
         \\  }
-        \\  .toggle > form > input:placeholder-shown + input {
-        \\    display: none;
-        \\  }
-        \\  .toggle:hover > form > input + input {
-        \\    display: inline-block;
+        \\  body {
+        \\    margin:40px auto;max-width:650px;line-height:1.6;font-size:18px;padding:0 10px;
         \\  }
+        \\  h1,h2,h3{line-height:1.2}
         \\</style>
         \\</head>
         \\<body>
@@ -564,24 +634,45 @@ fn write_start(res: *http.Response) !void {
 fn write_end(res: *http.Response) !void {
     try res.write("</body></html>", .{});
 }
-fn write_post(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, post_id: PostId, recurse: enum { No, Once, Yes }) !void {
-    const posts = try Db.posts(txn);
+fn write_post(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, post_id: PostId, options: struct { recurse: u8 = 0, show_comment_field: bool = false }) !void {
+    const posts = try Db.posts.open(txn);
     const post = posts.get(post_id) catch {
         res.redirect("/") catch {};
         return;
     };
-    const users = try Db.users(txn);
+    const users = try Db.users.open(txn);
     const user = try users.get(post.user_id);
 
     try res.write(
-        \\<div>
-        \\<span><a href="/user/{s}">{s}</a> {s}</span><br />
+        \\<div id="{x}">
+        \\<span><a href="/user/{s}">{s}</a>
+    , .{ @intFromEnum(post_id), user.name.constSlice(), user.display_name.constSlice() });
+    if (post.parent_id) |id| {
+        try res.write(" <a href=\"/post/{x}\">..</a>", .{@intFromEnum(id)});
+    }
+    try res.write(
+        \\ {s}</span><br />
         \\<span>{s}</span><br />
-    , .{ user.name.constSlice(), user.display_name.constSlice(), time_str(post.time).constSlice(), post.text.constSlice() });
+    , .{ time_str(post.time).constSlice(), post.text.constSlice() });
+
+    if (logged_in != null and post.user_id == logged_in.?.user.id) {
+        // Votes
+        try res.write(
+            \\<small>
+            \\<a href="/upvotes/{0x}">{1} Upvotes</a>
+            \\<a href="/downvotes/{0x}">{2} Downvotes</a>
+            \\</small>
+            \\<br />
+        , .{ @intFromEnum(post_id), post.upvotes, post.downvotes });
+    }
 
-    if (recurse != .No and post.quote_id != null) {
+    if (post.quote_id) |quote_id| {
         try res.write("<div style=\"border: 1px solid black;\">", .{});
-        try write_post(res, txn, logged_in, post.quote_id.?, .No);
+        if (options.recurse > 0) {
+            try write_post(res, txn, logged_in, quote_id, .{ .recurse = options.recurse - 1 });
+        } else {
+            try res.write("<a href=\"/post/{x}\">...</a>", .{@intFromEnum(post_id)});
+        }
         try res.write("</div>", .{});
     }
 
@@ -593,23 +684,23 @@ fn write_post(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, post_id: Po
     const vote: ?Vote = if (logged_in != null and try votes_view.has(logged_in.?.user.id)) try votes_view.get(logged_in.?.user.id) else null;
 
     if (vote != null and vote.?.kind == .Up) {
-        try html_form(res, "/upvote", .{}, .{
+        try html_form(res, "/upvote", .{
             .{ "type=\"hidden\" value=\"{x}\" name=\"post_id\"", .{@intFromEnum(post.id)} },
             .{ "type=\"submit\" value=\"&#x2B06; {}\"", .{post.upvotes} },
         });
     } else {
-        try html_form(res, "/upvote", .{}, .{
+        try html_form(res, "/upvote", .{
             .{ "type=\"hidden\" value=\"{x}\" name=\"post_id\"", .{@intFromEnum(post.id)} },
             .{ "type=\"submit\" value=\"&#x21E7; {}\"", .{post.upvotes} },
         });
     }
     if (vote != null and vote.?.kind == .Down) {
-        try html_form(res, "/downvote", .{}, .{
+        try html_form(res, "/downvote", .{
             .{ "type=\"hidden\" value=\"{x}\" name=\"post_id\"", .{@intFromEnum(post.id)} },
             .{ "type=\"submit\" value=\"&#x2B07; {}\"", .{post.downvotes} },
         });
     } else {
-        try html_form(res, "/downvote", .{}, .{
+        try html_form(res, "/downvote", .{
             .{ "type=\"hidden\" value=\"{x}\" name=\"post_id\"", .{@intFromEnum(post.id)} },
             .{ "type=\"submit\" value=\"&#x21E9; {}\"", .{post.downvotes} },
         });
@@ -617,52 +708,58 @@ fn write_post(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, post_id: Po
 
     // Comment Count
     try res.write(
-        \\<span class="toggle">
         \\<a href="/post/{x}">&#x1F4AD; {}</a> 
     , .{ @intFromEnum(post.id), comments_view.len() });
-    if (logged_in != null) {
-        try html_form(res, "/comment", .{}, .{
-            .{ "type=\"hidden\" value=\"{x}\" name=\"post_id\"", .{@intFromEnum(post.id)} },
-            "type=\"text\" name=\"text\" placeholder=\"Text\"",
-            "type=\"submit\" value=\"Comment\"",
-        });
-    }
-    try res.write(
-        \\</span>
-    , .{});
 
     // Quote
     try res.write(
-        \\<span class="toggle">
-        \\<a href="/quotes/{x}">&#x1F501; {}</a> 
+        \\<a href="/quoted/{x}">&#x1F501; {}</a> 
     , .{ @intFromEnum(post.id), quotes_view.len() });
-    try html_form(res, "/quote", .{}, .{
-        .{ "type=\"hidden\" value=\"{x}\" name=\"post_id\"", .{@intFromEnum(post.id)} },
-        "type=\"text\" name=\"text\" placeholder=\"Text\"",
-        "type=\"submit\" value=\"Quote\"",
-    });
-    try res.write(
-        \\</span>
-        \\<br />
-    , .{});
+
+    // Save to List
+    if (logged_in) |login| {
+        const lists_view = try login.user.post_lists.open(txn);
+        try res.write("<form action=\"/list_add\" method=\"post\">", .{});
+        try res.write("<select name=\"list_id\">", .{});
+        var it = lists_view.iterator();
+        // TODO: mark lists that already contain post
+        while (it.next()) |kv| {
+            const name = kv.val.name;
+            const id = kv.val.list.base.idx.?;
+            const list_view = try kv.val.list.open(txn);
+            try res.write("<option value=\"{x}\">{s}{s}</option>", .{ id, name.constSlice(), if (list_view.has(post_id) catch false) " *" else "" });
+        }
+        try res.write("</select>", .{});
+        try res.write("<input type=\"hidden\" name=\"post_id\" value=\"{x}\" />", .{@intFromEnum(post_id)});
+        try res.write("<input type=\"submit\" value=\"Save\" />", .{});
+        try res.write("</form>", .{});
+    }
+
+    // Comment field
+    // TODO: maybe always show comment field and prompt for login
+    if (options.show_comment_field and logged_in != null) {
+        try res.write("<br /><br />", .{});
+        try html_form(res, "/comment", .{
+            .{ "type=\"hidden\" value=\"{x}\" name=\"post_id\"", .{@intFromEnum(post.id)} },
+            .{ "textarea", "type=\"text\" name=\"text\" placeholder=\"Text\"", .{} },
+            "type=\"submit\" value=\"Comment\"",
+        });
+        try res.write("<br />", .{});
+    }
 
     // Comments
-    if (recurse != .No and comments_view.len() > 0) {
+    if (options.recurse > 0 and comments_view.len() > 0) {
         try res.write(
-            \\<details>
+            \\<details{s}>
             \\<summary>Comments</summary>
-        , .{});
+        , .{if (options.recurse > 1) " open" else ""});
         try res.write("<div style=\"margin: 10px;\">", .{});
         var it = comments_view.iterator();
         var count: u8 = 0;
-        while (it.next()) |kv| {
-            try write_post(res, txn, logged_in, kv.key, switch (recurse) {
-                .Yes => .Yes,
-                .Once => .No,
-                else => unreachable,
-            });
+        while (it.next()) |comment_id| {
+            try write_post(res, txn, logged_in, comment_id.key, .{ .recurse = options.recurse - 1 });
             try res.write("<br />", .{});
-            if (recurse == .Once) {
+            if (options.recurse == 1) {
                 count += 1;
                 if (count >= 3) break;
             }
@@ -677,32 +774,127 @@ fn write_post(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, post_id: Po
         \\</div>
     , .{});
 }
-fn write_posts(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, user: User) !void {
-    const posts_view = try user.posts.open(txn);
+fn write_profile(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, user: User) !void {
+    const following = try user.following.open(txn);
+    const followers = try user.followers.open(txn);
 
-    var it = posts_view.reverse_iterator();
-    while (it.next()) |kv| {
-        const post_id = kv.key;
+    try res.write(
+        \\<h2 style="display: inline;"><a href="/user/{s}">{s}</a></h2>
+    , .{
+        user.name.constSlice(), user.display_name.constSlice(),
+    });
+    if (logged_in != null and user.id != logged_in.?.user.id) {
+        const login = logged_in.?;
+
+        // follow/unfollow
+        if (try followers.has(login.user.id)) {
+            try html_form(res, "/follow", .{
+                .{ "type=\"hidden\" name=\"user_id\" value=\"{x}\"", .{@intFromEnum(user.id)} },
+                \\type="submit" value="Unfollow"
+            });
+        } else {
+            try html_form(res, "/follow", .{
+                .{ "type=\"hidden\" name=\"user_id\" value=\"{x}\"", .{@intFromEnum(user.id)} },
+                \\type="submit" value="Follow"
+            });
+        }
 
-        try write_post(res, txn, logged_in, post_id, .Once);
-        try res.write("<br />", .{});
+        // add to feed
+        const feeds_view = try login.user.feeds.open(txn);
+        try res.write("<form action=\"/feed_add\" method=\"post\">", .{});
+        try res.write("<select name=\"feed_id\">", .{});
+        var it = feeds_view.iterator();
+        while (it.next()) |kv| {
+            const name = kv.val.name;
+            const id = kv.val.list.base.idx.?;
+            const list_view = try kv.val.list.open(txn);
+            try res.write("<option value=\"{x}\">{s}{s}</option>", .{ id, name.constSlice(), if (list_view.has(user.id) catch false) " *" else "" });
+        }
+        try res.write("</select>", .{});
+        try res.write("<input type=\"hidden\" name=\"user_id\" value=\"{x}\" />", .{@intFromEnum(user.id)});
+        try res.write("<input type=\"submit\" value=\"Add to feed\" />", .{});
+        try res.write("</form>", .{});
+    }
+    try res.write(
+        \\ <a href="/following/{s}">{} following</a>
+        \\ <a href="/followers/{s}">{} followers</a>
+        \\<br />
+    , .{
+        user.name.constSlice(), following.len(),
+        user.name.constSlice(), followers.len(),
+    });
+
+    try res.write(
+        \\<a href="/all/{0s}">All Posts</a>
+        \\ <a href="/comments/{0s}">Comments</a>
+        \\ <a href="/quotes/{0s}">Quotes</a><br />
+    , .{
+        user.name.constSlice(),
+    });
+
+    if (logged_in != null and user.id == logged_in.?.user.id) {
+        try res.write(
+            \\<a href="/lists">Lists</a>
+            \\<a href="/feeds">Feeds</a>
+            \\<a href="/edit">Edit</a><br />
+            \\<br />
+        , .{});
+    }
+
+    if (user.description.len > 0) {
+        try res.write(
+            \\<div style="padding-left: 5px; border-left: 1px solid grey;">
+            // \\&#x00AB; {s} &#x00BB;
+            \\<i>{s}</i>
+            \\</div>
+        , .{user.description.constSlice()});
     }
+
+    try res.write("<br />", .{});
+}
+fn write_posts(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, post_list: PostSet, options: struct {
+    show_posts: bool,
+    show_quotes: bool,
+    show_comments: bool,
+}) !void {
+    const posts_view = try post_list.open(txn);
+
+    var paginate = try Paginate(PostSet).init(res, posts_view, Chirp.PostsPerPage);
+
+    while (paginate.next()) |post_id| {
+        const posts = try Db.posts.open(txn);
+        const post = try posts.get(post_id.key);
+        if ((options.show_posts and (post.parent_id == null and post.quote_id == null)) or
+            (options.show_quotes and (post.quote_id != null)) or
+            (options.show_comments and (post.parent_id != null)))
+        {
+            try write_post(res, txn, logged_in, post_id.key, .{ .recurse = 1 });
+            try res.write("<br />", .{});
+        }
+    }
+
+    try paginate.write_navigation();
 }
-fn write_timeline(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, user: User) !void {
-    const users = try Db.users(txn);
-    const posts = try Db.posts(txn);
+fn write_timeline(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, user_list: UserSet) !void {
+    // TODO: paginate
+    const users = try Db.users.open(txn);
+    const posts = try Db.posts.open(txn);
 
     var newest_post_ids = try std.BoundedArray(PostId, 10).init(0); // TODO: TimelinePostsCount
     var prev_newest_post: ?Post = null;
 
-    const following = try user.following.open(txn);
+    const following = try user_list.open(txn);
+    if (following.len() == 0) {
+        try res.write("Empty timeline (no users)", .{});
+        return;
+    }
 
     while (true) {
         var newest_post: ?Post = null;
 
-        var it = following.iterator();
-        while (it.next()) |kv| {
-            const followed_user = try users.get(kv.key);
+        var following_it = following.iterator();
+        while (following_it.next()) |following_id| {
+            const followed_user = try users.get(following_id.key);
             const followed_posts = try followed_user.posts.open(txn);
 
             if (followed_posts.len() == 0) {
@@ -710,11 +902,12 @@ fn write_timeline(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, user: U
             }
 
             var followed_posts_it = followed_posts.reverse_iterator();
-            while (followed_posts_it.next()) |followed_post_kv| {
-                const last_post = try posts.get(followed_post_kv.key);
+            while (followed_posts_it.next()) |followed_post_id| {
+                const p = try posts.get(followed_post_id.key);
 
-                if ((prev_newest_post == null or last_post.time < prev_newest_post.?.time) and (newest_post == null or newest_post.?.time < last_post.time)) {
-                    newest_post = last_post;
+                if ((prev_newest_post == null or p.time < prev_newest_post.?.time) and (newest_post == null or newest_post.?.time < p.time)) {
+                    newest_post = p;
+                    break;
                 }
             }
         }
@@ -727,18 +920,731 @@ fn write_timeline(res: *http.Response, txn: lmdb.Txn, logged_in: ?Login, user: U
     }
 
     for (newest_post_ids.constSlice()) |post_id| {
-        try write_post(res, txn, logged_in, post_id, .Once);
+        try write_post(res, txn, logged_in, post_id, .{ .recurse = 1 });
         try res.write("<br />", .{});
     }
 }
+fn write_frontpage(res: *http.Response, txn: lmdb.Txn) !void {
+    const posts = try Db.posts.open(txn);
+    var counter: u64 = 0;
+    var it = try posts.reverse_iterator();
+    while (it.next()) |p| {
+        if (p.val.parent_id == null and p.val.quote_id == null) {
+            try write_post(res, txn, null, p.key, .{ .recurse = 1 });
+            counter += 1;
+        }
+
+        if (counter >= 10) break;
+    }
+}
+fn write_user(res: *http.Response, txn: lmdb.Txn, user_id: UserId) !void {
+    const users = try Db.users.open(txn);
+    const user = try users.get(user_id);
+    try res.write(
+        \\<a href="/user/{s}">{s}</a>
+    , .{ user.name.constSlice(), user.display_name.constSlice() });
+}
+fn write_votes(res: *http.Response, txn: lmdb.Txn, votes: VoteList, options: struct {
+    show_upvotes: bool = true,
+    show_downvotes: bool = true,
+}) !void {
+    const votes_view = try votes.open(txn);
+
+    var paginate = try Paginate(VoteList).init(res, votes_view, Chirp.UsersPerPage);
+
+    while (paginate.next()) |kv| {
+        const user_id = kv.key;
+        const vote = kv.val;
+
+        if ((options.show_upvotes and vote.kind == .Up) or
+            (options.show_downvotes and vote.kind == .Down))
+        {
+            try write_user(res, txn, user_id);
+            try res.write(" <small>{s}</small><br />", .{time_str(vote.time).constSlice()});
+        }
+    }
+
+    try paginate.write_navigation();
+}
+fn check_login(env: lmdb.Env, req: http.Request, res: *http.Response) !?Login {
+    var result: ?Login = null;
+
+    if (req.get_cookie("session_token")) |session_token_str| {
+        var remove_session_token = true;
+
+        if (std.fmt.parseUnsigned(SessionToken, session_token_str, 16) catch null) |session_token| {
+            // const session_token = try std.fmt.parseUnsigned(SessionToken, session_token_str, 10);
+            // const session_token = std.mem.bytesToValue(SessionToken, session_token_str);
+            if (Chirp.get_session_user_id(env, session_token) catch null) |user_id| {
+                const txn = try env.txn();
+                defer txn.abort();
+                const users = try Db.users.open(txn);
+
+                result = .{
+                    .user = try users.get(user_id),
+                    .session_token = session_token,
+                };
+
+                remove_session_token = false;
+            }
+        }
+
+        if (remove_session_token) {
+            try res.add_header(
+                "Set-Cookie",
+                .{"session_token=deleted; Expires=Thu, 01 Jan 1970 00:00:00 GMT"},
+            );
+        }
+    }
+
+    return result;
+}
+// }}}
+
+// GET {{{
+const GET = struct {
+    const Self = @This();
+
+    txn: lmdb.Txn,
+    req: http.Request,
+    res: *http.Response,
+    logged_in: ?Login,
+
+    fn handle(self: Self) !bool {
+        const ti = @typeInfo(Self);
+        inline for (ti.@"struct".decls) |f_decl| {
+            const has_arg = f_decl.name.len > 1 and f_decl.name[f_decl.name.len - 1] == '/';
+            const match = if (has_arg) std.mem.startsWith(u8, self.req.target, f_decl.name) else std.mem.eql(u8, self.req.target, f_decl.name);
+
+            if (match) {
+                const f = @field(Self, f_decl.name);
+                const fi = @typeInfo(@TypeOf(f));
+                if (fi.@"fn".params.len == 1) {
+                    try @call(.auto, f, .{self});
+                } else {
+                    const arg_type = fi.@"fn".params[1].type.?;
+                    const arg_info = @typeInfo(arg_type);
+                    var arg: arg_type = undefined;
+                    const field = arg_info.@"struct".fields[0];
+                    if (self.req.target.len <= f_decl.name.len) {
+                        return error.NoArgProvided;
+                    }
+                    const str = self.req.target[f_decl.name.len..self.req.target.len];
+                    const field_ti = @typeInfo(field.type);
+                    switch (field_ti) {
+                        // TODO: maybe handle BoundedArray?
+                        .int => {
+                            @field(arg, field.name) = try std.fmt.parseUnsigned(field.type, str, 16);
+                        },
+                        .@"enum" => {
+                            @field(arg, field.name) = try parse_enum(field.type, str, 16);
+                        },
+                        else => {
+                            @field(arg, field.name) = str;
+                        },
+                    }
+
+                    try @call(.auto, f, .{ self, arg });
+                }
+                return true;
+            }
+        }
+        return false;
+    }
+
+    pub fn @"/user/"(self: Self, args: struct { username: []const u8 }) !void {
+        const user_ids = try Db.user_ids.open(self.txn);
+        if (user_ids.get(try Username.fromSlice(args.username))) |user_id| {
+            const users = try Db.users.open(self.txn);
+            const user = try users.get(user_id);
+
+            try write_profile(self.res, self.txn, self.logged_in, user);
+
+            try write_posts(self.res, self.txn, self.logged_in, user.posts, .{
+                .show_posts = true,
+                .show_quotes = false,
+                .show_comments = false,
+            });
+        } else |err| {
+            try self.res.write(
+                \\<p>User not found [{}]</p>
+            , .{err});
+        }
+    }
+    pub fn @"/comments/"(self: Self, args: struct { username: []const u8 }) !void {
+        const user_ids = try Db.user_ids.open(self.txn);
+        if (user_ids.get(try Username.fromSlice(args.username))) |user_id| {
+            const users = try Db.users.open(self.txn);
+            const user = try users.get(user_id);
+
+            try write_profile(self.res, self.txn, self.logged_in, user);
+
+            try write_posts(self.res, self.txn, self.logged_in, user.posts, .{
+                .show_posts = false,
+                .show_quotes = false,
+                .show_comments = true,
+            });
+        } else |err| {
+            try self.res.write(
+                \\<p>User not found [{}]</p>
+            , .{err});
+        }
+    }
+    pub fn @"/quotes/"(self: Self, args: struct { username: []const u8 }) !void {
+        const user_ids = try Db.user_ids.open(self.txn);
+        if (user_ids.get(try Username.fromSlice(args.username))) |user_id| {
+            const users = try Db.users.open(self.txn);
+            const user = try users.get(user_id);
+
+            try write_profile(self.res, self.txn, self.logged_in, user);
+
+            try write_posts(self.res, self.txn, self.logged_in, user.posts, .{
+                .show_posts = false,
+                .show_quotes = true,
+                .show_comments = false,
+            });
+        } else |err| {
+            try self.res.write(
+                \\<p>User not found [{}]</p>
+            , .{err});
+        }
+    }
+    pub fn @"/all/"(self: Self, args: struct { username: []const u8 }) !void {
+        const user_ids = try Db.user_ids.open(self.txn);
+        if (user_ids.get(try Username.fromSlice(args.username))) |user_id| {
+            const users = try Db.users.open(self.txn);
+            const user = try users.get(user_id);
+
+            try write_profile(self.res, self.txn, self.logged_in, user);
+
+            try write_posts(self.res, self.txn, self.logged_in, user.posts, .{
+                .show_posts = true,
+                .show_quotes = true,
+                .show_comments = true,
+            });
+        } else |err| {
+            try self.res.write(
+                \\<p>User not found [{}]</p>
+            , .{err});
+        }
+    }
+    pub fn @"/following/"(self: Self, args: struct { username: []const u8 }) !void {
+        const user_ids = try Db.user_ids.open(self.txn);
+        if (user_ids.get(try Username.fromSlice(args.username))) |user_id| {
+            const users = try Db.users.open(self.txn);
+            const user = try users.get(user_id);
+
+            const following_view = try user.following.open(self.txn);
+
+            var paginate = try Paginate(UserSet).init(self.res, following_view, Chirp.UsersPerPage);
+
+            try self.res.write(
+                \\<h2><a href="/user/{s}">{s}</a> follows:</h2>
+            , .{ user.name.constSlice(), user.display_name.constSlice() });
+
+            while (paginate.next()) |following_id| {
+                const following_user = try users.get(following_id.key);
+
+                try self.res.write(
+                    \\<a href="/user/{s}">{s}</a><br />
+                , .{ following_user.name.constSlice(), following_user.display_name.constSlice() });
+            }
+
+            try paginate.write_navigation();
+        } else |err| {
+            try self.res.write(
+                \\<p>User not found [{}]</p>
+            , .{err});
+        }
+    }
+    pub fn @"/followers/"(self: Self, args: struct { username: []const u8 }) !void {
+        const user_ids = try Db.user_ids.open(self.txn);
+        if (user_ids.get(try Username.fromSlice(args.username))) |user_id| {
+            const users = try Db.users.open(self.txn);
+            const user = try users.get(user_id);
+
+            const followers_view = try user.followers.open(self.txn);
+            var paginate = try Paginate(UserSet).init(self.res, followers_view, Chirp.UsersPerPage);
+
+            try self.res.write(
+                \\<h2><a href="/user/{s}">{s}</a> followers:</h2>
+            , .{ user.name.constSlice(), user.display_name.constSlice() });
+
+            while (paginate.next()) |follower_id| {
+                const follower_user = try users.get(follower_id.key);
+
+                try self.res.write(
+                    \\<a href="/user/{s}">{s}</a><br />
+                , .{ follower_user.name.constSlice(), follower_user.display_name.constSlice() });
+            }
+
+            try paginate.write_navigation();
+        } else |err| {
+            try self.res.write(
+                \\<p>User not found [{}]</p>
+            , .{err});
+        }
+    }
+    pub fn @"/post/"(self: Self, args: struct { post_id: PostId }) !void {
+        try write_post(self.res, self.txn, self.logged_in, args.post_id, .{
+            .recurse = 3, // TODO: factor out
+            .show_comment_field = true,
+        });
+    }
+    pub fn @"/upvotes/"(self: Self, args: struct { post_id: PostId }) !void {
+        const posts = try Db.posts.open(self.txn);
+        const post = try posts.get(args.post_id);
+        try self.res.write("{} upvotes:<br />", .{post.upvotes});
+        try write_votes(self.res, self.txn, post.votes, .{});
+    }
+    pub fn @"/quoted/"(self: Self, args: struct { post_id: PostId }) !void {
+        const posts = try Db.posts.open(self.txn);
+        const post = try posts.get(args.post_id);
+
+        const referer = if (self.req.get_header("Referer")) |ref| ref else self.req.target;
+
+        if (self.logged_in != null) {
+            try html_form(self.res, "/quote", .{
+                .{ "type=\"hidden\" name=\"referer\" value=\"{s}\"", .{referer} },
+                .{ "type=\"hidden\" name=\"post_id\" value=\"{x}\"", .{@intFromEnum(post.id)} },
+                .{ "textarea", "type=\"text\" name=\"text\" placeholder=\"Text\" autofocus", .{} },
+                "type=\"submit\" value=\"Quote\"",
+            });
+            try self.res.write("<br />", .{});
+        }
+
+        // TODO: show all bc this only contains quotes?
+        try write_posts(self.res, self.txn, self.logged_in, post.quotes, .{
+            .show_posts = false,
+            .show_quotes = true,
+            .show_comments = false,
+        });
+    }
+    pub fn @"/list/"(self: Self, args: struct { list_id: PostSet.Base.Index }) !void {
+        try write_posts(self.res, self.txn, self.logged_in, PostSet{ .base = .{ .idx = args.list_id } }, .{
+            .show_posts = true,
+            .show_quotes = true,
+            .show_comments = true,
+        });
+    }
+    pub fn @"/lists"(self: Self) !void {
+        if (self.logged_in) |login| {
+            const post_lists_view = try login.user.post_lists.open(self.txn);
+
+            try html_form(self.res, "/create_list", .{
+                "type=\"text\" name=\"name\"",
+                "type=\"submit\" value=\"Add\"",
+            });
+
+            try self.res.write("<br /><br />", .{});
+
+            var it = post_lists_view.iterator();
+            while (it.next()) |kv| {
+                const name = kv.val.name;
+                const post_list = kv.val.list;
+                try self.res.write(
+                    \\<a href="/list/{x}">{s}</a> 
+                , .{ post_list.base.idx.?, name.constSlice() });
+                try html_form(self.res, "/delete_list", .{
+                    .{ "type=\"hidden\" name=\"list_id\" value=\"{x}\"", .{kv.key} },
+                    "type=\"submit\" value=\"Delete\"",
+                });
+                try self.res.write("<br />", .{});
+            }
+        } else {
+            try self.res.write("not logged in", .{});
+        }
+    }
+    pub fn @"/feed/"(self: Self, args: struct { feed_id: UserSet.Base.Index }) !void {
+        try write_timeline(self.res, self.txn, self.logged_in, UserSet{ .base = .{ .idx = args.feed_id } });
+    }
+    pub fn @"/feeds"(self: Self) !void {
+        if (self.logged_in) |login| {
+            const feeds_view = try login.user.feeds.open(self.txn);
+
+            try html_form(self.res, "/create_feed", .{
+                "type=\"text\" name=\"name\"",
+                "type=\"submit\" value=\"Add\"",
+            });
+
+            try self.res.write("<br /><br />", .{});
+
+            var it = feeds_view.iterator();
+            while (it.next()) |kv| {
+                const name = kv.val.name;
+                const user_list = kv.val.list;
+                try self.res.write(
+                    \\<a href="/feed/{x}">{s}</a> 
+                , .{ user_list.base.idx.?, name.constSlice() });
+                try html_form(self.res, "/delete_feed", .{
+                    .{ "type=\"hidden\" name=\"list_id\" value=\"{x}\"", .{kv.key} },
+                    "type=\"submit\" value=\"Delete\"",
+                });
+                try self.res.write("<br />", .{});
+            }
+        } else {
+            try self.res.write("not logged in", .{});
+        }
+    }
+    pub fn @"/post"(self: Self) !void {
+        if (self.logged_in) |login| {
+            _ = login;
+            const referer = if (self.req.get_header("Referer")) |ref| ref else self.req.target;
+
+            try html_form(self.res, "/post", .{
+                .{ "type=\"hidden\" name=\"referer\" value=\"{s}\"", .{referer} },
+                .{ "textarea", "type=\"text\" name=\"text\" placeholder=\"Text\" autofocus", .{} },
+                "type=\"submit\" value=\"Post\"",
+            });
+        } else {
+            try self.res.write("not logged in", .{});
+        }
+    }
+    pub fn @"/edit"(self: Self) !void {
+        if (self.logged_in) |login| {
+            try self.res.write("<br />Username: ", .{});
+            try html_form(self.res, "/set_username", .{
+                .{ "type=\"text\" name=\"username\" placeholder=\"{s}\"", .{login.user.name.constSlice()} },
+                "type=\"submit\" value=\"Change\"",
+            });
+            try self.res.write("<br />Display Name: ", .{});
+            try html_form(self.res, "/set_display_name", .{
+                .{ "type=\"text\" name=\"display_name\" placeholder=\"{s}\"", .{login.user.display_name.constSlice()} },
+                "type=\"submit\" value=\"Change\"",
+            });
+            try self.res.write("<br />Description: ", .{});
+            try html_form(self.res, "/set_description", .{
+                .{ "textarea", "type=\"text\" name=\"description\" placeholder=\"{s}\"", .{login.user.description.constSlice()} },
+                "type=\"submit\" value=\"Change\"",
+            });
+            try self.res.write("<br />Password: ", .{});
+            try html_form(self.res, "/set_password", .{
+                "type=\"text\" name=\"password\"",
+                "type=\"submit\" value=\"Change\"",
+            });
+        } else {
+            try self.res.write("not logged in", .{});
+        }
+    }
+    pub fn @"/"(self: Self) !void {
+        if (self.logged_in) |login| {
+            try write_timeline(self.res, self.txn, self.logged_in, login.user.following);
+        } else {
+            // TODO: generic home
+            try self.res.write("Homepage", .{});
+            // try write_frontpage(self.res, self.txn);
+        }
+    }
+};
+// }}}
+
+// POST {{{
+const POST = struct {
+    const Self = @This();
+
+    env: lmdb.Env,
+    req: http.Request,
+    res: *http.Response,
+    logged_in: ?Login,
+
+    pub fn handle(self: Self) !bool {
+        const ti = @typeInfo(Self);
+        inline for (ti.@"struct".decls) |f_decl| {
+            if (std.mem.eql(u8, f_decl.name, self.req.target)) {
+                const f = @field(Self, f_decl.name);
+                const fi = @typeInfo(@TypeOf(f));
+                if (fi.@"fn".params.len == 1) {
+                    _ = try @call(.auto, f, .{self});
+                } else {
+                    const args_type = fi.@"fn".params[fi.@"fn".params.len - 1].type.?;
+                    const argsi = @typeInfo(args_type);
+                    var args: args_type = undefined;
+                    inline for (argsi.@"struct".fields) |field| {
+                        const str = self.req.get_value(field.name) orelse return error.ArgNotFound;
+                        const field_ti = @typeInfo(field.type);
+                        switch (field_ti) {
+                            .int => {
+                                @field(args, field.name) = try std.fmt.parseUnsigned(field.type, str, 16);
+                            },
+                            .@"enum" => {
+                                @field(args, field.name) = try parse_enum(field.type, str, 16);
+                            },
+                            else => {
+                                @field(args, field.name) = str;
+                            },
+                        }
+                    }
+                    try @call(.auto, f, .{ self, args });
+                }
+                return true;
+            }
+        }
+        return false;
+    }
+
+    pub fn @"/register"(self: Self, args: struct { username: []const u8, password: []const u8 }) !void {
+        // TODO: handle args not supplied
+        std.debug.print("New user: {s} {s}\n", .{ args.username, args.password });
+        _ = try Chirp.register_user(self.env, args.username, args.password);
+    }
+    pub fn @"/login"(self: Self, args: struct { username: []const u8, password: []const u8 }) !void {
+        // TODO: handle args not supplied
+        std.debug.print("New login: {s} {s}\n", .{ args.username, args.password });
+        if (Chirp.login_user(self.env, args.username, args.password)) |session_token| {
+            self.res.status = .see_other;
+            try self.res.add_header(
+                "Set-Cookie",
+                .{ "session_token={x}; HttpOnly", .{session_token} },
+            );
+        } else |err| {
+            std.debug.print("login_user err: {}\n", .{err});
+        }
+    }
+    pub fn @"/logout"(self: Self) !void {
+        if (self.logged_in) |login| {
+            try Chirp.logout_user(self.env, login.session_token);
+
+            try self.res.add_header(
+                "Set-Cookie",
+                .{"session_token=deleted; Expires=Thu, 01 Jan 1970 00:00:00 GMT"},
+            );
+        }
+    }
+    pub fn @"/set_username"(self: Self, args: struct { username: []const u8 }) !void {
+        const login = self.logged_in orelse return error.NotLoggedIn;
+        const username = try Username.fromSlice(args.username);
+
+        const txn = try self.env.txn();
+        defer txn.commit() catch {};
+
+        var user_ids = try Db.user_ids.open(txn);
+
+        if (!try user_ids.has(username)) {
+            try user_ids.del(login.user.name);
+            try user_ids.put(username, login.user.id);
+
+            const users = try Db.users.open(txn);
+            var user = login.user;
+            user.name = username;
+            try users.put(login.user.id, user);
+        }
+    }
+    pub fn @"/set_display_name"(self: Self, args: struct { display_name: []const u8 }) !void {
+        const login = self.logged_in orelse return error.NotLoggedIn;
+        const display_name = try DisplayName.fromSlice(args.display_name);
+
+        const txn = try self.env.txn();
+        defer txn.commit() catch {};
+
+        const users = try Db.users.open(txn);
+        var user = login.user;
+        user.display_name = display_name;
+        try users.put(login.user.id, user);
+    }
+    pub fn @"/set_description"(self: Self, args: struct { description: []const u8 }) !void {
+        const login = self.logged_in orelse return error.NotLoggedIn;
+        const description = try reencode(UserDescription, args.description);
+
+        const txn = try self.env.txn();
+        defer txn.commit() catch {};
+
+        const users = try Db.users.open(txn);
+        var user = login.user;
+        user.description = description;
+        try users.put(login.user.id, user);
+    }
+    pub fn @"/set_password"(self: Self, args: struct { password: []const u8 }) !void {
+        const login = self.logged_in orelse return error.NotLoggedIn;
+
+        const txn = try self.env.txn();
+        defer txn.commit() catch {};
+
+        const users = try Db.users.open(txn);
+        var user = login.user;
+        user.password_hash = try Chirp.hash_password(args.password);
+        try users.put(login.user.id, user);
+    }
+    pub fn @"/post"(self: Self) !void {
+        if (self.logged_in) |login| {
+            const text = self.req.get_value("text").?;
+            const has_referer = self.req.get_value("referer");
+
+            try Chirp.post(self.env, login.user.id, text);
+
+            if (has_referer) |r| {
+                const decoded = try decode(r);
+                try self.res.redirect(decoded.constSlice());
+            }
+        }
+    }
+    pub fn @"/comment"(self: Self) !void {
+        if (self.logged_in) |login| {
+            const text = self.req.get_value("text") orelse return error.NoText;
+            const post_id_str = self.req.get_value("post_id") orelse return error.NoPostId;
+            const post_id = try parse_enum(PostId, post_id_str, 16);
+
+            try Chirp.comment(self.env, login.user.id, post_id, text);
+        }
+    }
+    pub fn @"/quote"(self: Self) !void {
+        if (self.logged_in) |login| {
+            const text = self.req.get_value("text") orelse return error.NoText;
+            const post_id_str = self.req.get_value("post_id") orelse return error.NoPostId;
+            const has_referer = self.req.get_value("referer");
+
+            const post_id = try parse_enum(PostId, post_id_str, 16);
+
+            try Chirp.quote(self.env, login.user.id, post_id, text);
+
+            if (has_referer) |r| {
+                const decoded = try decode(r);
+                try self.res.redirect(decoded.constSlice());
+            }
+        }
+    }
+    // TODO: add arguments instead of parsing manually
+    pub fn @"/create_list"(self: Self) !void {
+        if (self.logged_in) |login| {
+            const name_str = self.req.get_value("name") orelse return error.NoName;
+            const name = try Name.fromSlice(name_str);
+            // TODO: decode name
+
+            var txn = try self.env.txn();
+            const postlist = try PostSet.init(txn);
+            try txn.commit();
+
+            txn = try self.env.txn();
+            var post_lists_view = try login.user.post_lists.open(txn);
+            _ = try post_lists_view.append(.{ .name = name, .list = postlist });
+            try txn.commit();
+        }
+    }
+    pub fn @"/delete_list"(self: Self, args: struct { list_id: PostSet.Base.Index }) !void {
+        if (self.logged_in) |login| {
+            var post_list: ?PostSet = null;
+            {
+                const txn = try self.env.txn();
+                defer txn.commit() catch {};
+                var post_lists_view = try login.user.post_lists.open(txn);
+                post_list = (try post_lists_view.get(args.list_id)).list;
+                try post_lists_view.del(args.list_id);
+            }
+            if (post_list != null) {
+                const txn = try self.env.txn();
+                defer txn.commit() catch {};
+                var list_view = try post_list.?.open(txn);
+                try list_view.clear();
+            }
+        }
+    }
+    pub fn @"/list_add"(self: Self, args: struct { list_id: PostSet.Base.Index, post_id: PostId }) !void {
+        if (self.logged_in) |login| {
+            _ = login;
+
+            const txn = try self.env.txn();
+            defer txn.commit() catch {};
+
+            const post_list = PostSet{ .base = .{ .idx = args.list_id } };
+            var post_list_view = try post_list.open(txn);
+            if (try post_list_view.has(args.post_id)) {
+                try post_list_view.del(args.post_id);
+            } else {
+                try post_list_view.append(args.post_id);
+            }
+        }
+    }
+    pub fn @"/create_feed"(self: Self) !void {
+        if (self.logged_in) |login| {
+            const name_str = self.req.get_value("name") orelse return error.NoName;
+            const name = try Name.fromSlice(name_str);
+
+            var txn = try self.env.txn();
+            const userlist = try UserSet.init(txn);
+            try txn.commit();
+
+            txn = try self.env.txn();
+            var feeds_view = try login.user.feeds.open(txn);
+            _ = try feeds_view.append(.{ .name = name, .list = userlist });
+            try txn.commit();
+        }
+    }
+    pub fn @"/delete_feed"(self: Self, args: struct { list_id: UserSet.Base.Index }) !void {
+        if (self.logged_in) |login| {
+            var user_list: ?UserSet = null;
+
+            {
+                const txn = try self.env.txn();
+                defer txn.commit() catch {};
+                var feeds_view = try login.user.feeds.open(txn);
+                user_list = (try feeds_view.get(args.list_id)).list;
+                try feeds_view.del(args.list_id);
+            }
+            if (user_list != null) {
+                const txn = try self.env.txn();
+                defer txn.commit() catch {};
+                var list_view = try user_list.?.open(txn);
+                try list_view.clear();
+            }
+        }
+    }
+    pub fn @"/feed_add"(self: Self, args: struct { feed_id: UserSet.Base.Index, user_id: UserId }) !void {
+        if (self.logged_in) |login| {
+            _ = login;
+
+            const txn = try self.env.txn();
+            defer txn.commit() catch {};
+
+            const user_list = UserSet{ .base = .{ .idx = args.feed_id } };
+            var user_list_view = try user_list.open(txn);
+            if (try user_list_view.has(args.user_id)) {
+                try user_list_view.del(args.user_id);
+            } else {
+                try user_list_view.append(args.user_id);
+            }
+        }
+    }
+    pub fn @"/upvote"(self: Self) !void {
+        const login = self.logged_in orelse return error.NotLoggedIn;
+
+        const post_id_str = self.req.get_value("post_id") orelse return error.NoPostId;
+        const post_id: PostId = @enumFromInt(try std.fmt.parseUnsigned(u64, post_id_str, 16));
+
+        try Chirp.vote(self.env, post_id, login.user.id, .Up);
+    }
+    pub fn @"/downvote"(self: Self) !void {
+        const login = self.logged_in orelse return error.NotLoggedIn;
+
+        const post_id_str = self.req.get_value("post_id") orelse return error.NoPostId;
+        const post_id: PostId = @enumFromInt(try std.fmt.parseUnsigned(u64, post_id_str, 16));
+
+        try Chirp.vote(self.env, post_id, login.user.id, .Down);
+    }
+    pub fn @"/follow"(self: Self) !void {
+        const login = self.logged_in orelse return error.NotLoggedIn;
+
+        const user_id_str = self.req.get_value("user_id") orelse return error.NoUserId;
+        const user_id: UserId = @enumFromInt(try std.fmt.parseUnsigned(u64, user_id_str, 16));
+
+        try Chirp.follow(self.env, login.user.id, user_id);
+    }
+    pub fn @"/quit"(self: Self) !void {
+        if (self.req.get_header("Referer")) |ref| {
+            try self.res.redirect(ref);
+        } else {
+            try self.res.redirect("/");
+        }
+        try self.res.send();
+        // break :accept;
+    }
+};
 // }}}
 
 fn list_users(env: lmdb.Env) !void {
     const txn = try env.txn();
     defer txn.abort();
 
-    const users = try Db.users(txn);
-    var it = try users.iterator();
+    const users = try Db.users.open(txn);
+    var it = users.iterator();
 
     while (it.next()) |kv| {
         const key = kv.key;
@@ -750,8 +1656,8 @@ fn list_user_ids(env: lmdb.Env) !void {
     const txn = try env.txn();
     defer txn.abort();
 
-    const user_ids = try Db.user_ids(txn);
-    var it = try user_ids.iterator();
+    const user_ids = try Db.user_ids.open(txn);
+    var it = user_ids.iterator();
 
     while (it.next()) |kv| {
         const key = kv.key;
@@ -764,8 +1670,8 @@ fn list_sessions(env: lmdb.Env) !void {
     const txn = try env.txn();
     defer txn.abort();
 
-    const sessions = try Db.sessions(txn);
-    var it = try sessions.iterator();
+    const sessions = try Db.sessions.open(txn);
+    var it = sessions.iterator();
 
     while (it.next()) |kv| {
         const key = kv.key;
@@ -778,8 +1684,8 @@ fn list_posts(env: lmdb.Env) !void {
     const txn = try env.txn();
     defer txn.abort();
 
-    const posts = try Db.posts(txn);
-    var it = try posts.iterator();
+    const posts = try Db.posts.open(txn);
+    var it = posts.iterator();
 
     while (it.next()) |kv| {
         const key = kv.key;
@@ -792,6 +1698,11 @@ const ReqBufferSize = 4096;
 const ResHeadBufferSize = 1024 * 64;
 const ResBodyBufferSize = 1024 * 64;
 
+// TODO: static?
+var req_buffer: [ReqBufferSize]u8 = undefined;
+var res_head_buffer: [ResHeadBufferSize]u8 = undefined;
+var res_body_buffer: [ResBodyBufferSize]u8 = undefined;
+
 pub fn main() !void {
     // server
     var server = try http.Server.init("::", 8080);
@@ -801,6 +1712,8 @@ pub fn main() !void {
     var env = try lmdb.Env.open("db", 1024 * 1024 * 10);
     defer env.close();
 
+    try Db.init(env);
+
     std.debug.print("Users:\n", .{});
     try list_users(env);
     std.debug.print("User IDs:\n", .{});
@@ -810,7 +1723,16 @@ pub fn main() !void {
     std.debug.print("Posts:\n", .{});
     try list_posts(env);
 
-    try handle_connection(&server, &env);
+    while (true) {
+        server.wait();
+        while (true) {
+            const req = (server.next_request(&req_buffer) catch break) orelse break;
+            // handle_request(env, req) catch {
+            //     try handle_error(env, req);
+            // };
+            try handle_request(env, req);
+        }
+    }
     // const ThreadCount = 1;
     // var ts: [ThreadCount]std.Thread = undefined;
 
@@ -824,368 +1746,64 @@ pub fn main() !void {
     std.debug.print("done\n", .{});
 }
 
-fn handle_connection(server: *http.Server, env: *lmdb.Env) !void {
-    // TODO: static?
-    var req_buffer: [ReqBufferSize]u8 = undefined;
-    var res_head_buffer: [ResHeadBufferSize]u8 = undefined;
-    var res_body_buffer: [ResBodyBufferSize]u8 = undefined;
-
-    accept: while (true) {
-        server.wait();
-
-        while (try server.next_request(&req_buffer)) |*_req| {
-            var req: *http.Request = @constCast(_req);
-            // std.debug.print("[{}]: {s}\n", .{ req.method, req.target });
-
-            // reponse
-            var res = http.Response.init(req.fd, &res_head_buffer, &res_body_buffer);
-
-            // check session token
-            var logged_in: ?Login = null;
-
-            if (req.get_cookie("session_token")) |session_token_str| {
-                var remove_session_token = true;
-
-                if (std.fmt.parseUnsigned(SessionToken, session_token_str, 16) catch null) |session_token| {
-                    // const session_token = try std.fmt.parseUnsigned(SessionToken, session_token_str, 10);
-                    // const session_token = std.mem.bytesToValue(SessionToken, session_token_str);
-                    if (Chirp.get_session_user_id(env, session_token) catch null) |user_id| {
-                        const txn = try env.txn();
-                        defer txn.abort();
-                        const users = try Db.users(txn);
-
-                        logged_in = .{
-                            .user = try users.get(user_id),
-                            .session_token = session_token,
-                        };
-
-                        remove_session_token = false;
-                    }
-                }
-
-                if (remove_session_token) {
-                    try res.add_header(
-                        "Set-Cookie",
-                        .{"session_token=deleted; Expires=Thu, 01 Jan 1970 00:00:00 GMT"},
-                    );
-                }
-            }
-
-            // TODO: refactor into functions
-            // TODO: make sure we send a reply
-
-            // html
-            if (req.method == .GET) {
-                try write_start(&res);
-                try write_header(&res, logged_in);
-
-                const txn = try env.txn();
-                defer txn.abort();
-
-                if (std.mem.startsWith(u8, req.target, "/user/")) {
-                    const username = req.target[6..req.target.len];
-
-                    const user_ids = try Db.user_ids(txn);
-                    if (user_ids.get(try Username.fromSlice(username))) |user_id| {
-                        const users = try Db.users(txn);
-                        const user = try users.get(user_id);
-
-                        const following = try user.following.open(txn);
-                        const followers = try user.followers.open(txn);
-
-                        try res.write(
-                            \\<a href="/user/{s}">{s}</a>
-                        , .{
-                            user.name.constSlice(), user.display_name.constSlice(),
-                        });
-                        if (logged_in != null and user_id != logged_in.?.user.id) {
-                            if (try followers.has(logged_in.?.user.id)) {
-                                try html_form(&res, "/follow", .{}, .{
-                                    .{ "type=\"hidden\" name=\"user_id\" value=\"{x}\"", .{@intFromEnum(user_id)} },
-                                    \\type="submit" value="Unfollow"
-                                });
-                            } else {
-                                try html_form(&res, "/follow", .{}, .{
-                                    .{ "type=\"hidden\" name=\"user_id\" value=\"{x}\"", .{@intFromEnum(user_id)} },
-                                    \\type="submit" value="Follow"
-                                });
-                            }
-                        }
-                        try res.write(
-                            \\ <a href="/following/{s}">{} following</a>
-                            \\ <a href="/followers/{s}">{} followers</a>
-                        , .{
-                            user.name.constSlice(), following.len(),
-                            user.name.constSlice(), followers.len(),
-                        });
-
-                        try write_posts(&res, txn, logged_in, user);
-                    } else |err| {
-                        try res.write(
-                            \\<p>User not found [{}]</p>
-                        , .{err});
-                    }
-                } else if (std.mem.startsWith(u8, req.target, "/following/")) {
-                    const username = req.target[11..req.target.len];
-
-                    const user_ids = try Db.user_ids(txn);
-                    if (user_ids.get(try Username.fromSlice(username))) |user_id| {
-                        const users = try Db.users(txn);
-                        const user = try users.get(user_id);
-
-                        const following = try user.following.open(txn);
-                        var it = following.iterator();
-
-                        try res.write(
-                            \\<h2><a href="/user/{s}">{s}</a> follows:</h2>
-                        , .{ user.name.constSlice(), user.display_name.constSlice() });
-
-                        while (it.next()) |kv| {
-                            const following_user = try users.get(kv.key);
-
-                            try res.write(
-                                \\<a href="/user/{s}">{s}</a><br />
-                            , .{ following_user.name.constSlice(), following_user.display_name.constSlice() });
-                        }
-                    } else |err| {
-                        try res.write(
-                            \\<p>User not found [{}]</p>
-                        , .{err});
-                    }
-                } else if (std.mem.startsWith(u8, req.target, "/followers/")) {
-                    const username = req.target[11..req.target.len];
-
-                    const user_ids = try Db.user_ids(txn);
-                    if (user_ids.get(try Username.fromSlice(username))) |user_id| {
-                        const users = try Db.users(txn);
-                        const user = try users.get(user_id);
-
-                        const followers = try user.followers.open(txn);
-                        var it = followers.iterator();
-
-                        try res.write(
-                            \\<h2><a href="/user/{s}">{s}</a> followers:</h2>
-                        , .{ user.name.constSlice(), user.display_name.constSlice() });
-
-                        while (it.next()) |kv| {
-                            const follower_user = try users.get(kv.key);
-
-                            try res.write(
-                                \\<a href="/user/{s}">{s}</a><br />
-                            , .{ follower_user.name.constSlice(), follower_user.display_name.constSlice() });
-                        }
-                    } else |err| {
-                        try res.write(
-                            \\<p>User not found [{}]</p>
-                        , .{err});
-                    }
-                } else if (std.mem.startsWith(u8, req.target, "/post/")) {
-                    const post_id_str = req.target[6..req.target.len];
-                    const post_id = try parse_enum(PostId, post_id_str, 16);
-
-                    try write_post(&res, txn, logged_in, post_id, .Yes);
-                } else if (std.mem.startsWith(u8, req.target, "/quotes/")) {
-                    const post_id_str = req.target[8..req.target.len];
-                    const post_id = try parse_enum(PostId, post_id_str, 16);
-
-                    const posts = try Db.posts(txn);
-                    const post = try posts.get(post_id);
-
-                    const quotes_view = try post.quotes.open(txn);
-                    var it = quotes_view.iterator();
-                    while (it.next()) |kv| {
-                        try write_post(&res, txn, logged_in, kv.key, .Once);
-                        try res.write("<br />", .{});
-                    }
-                } else if (std.mem.eql(u8, req.target, "/post")) {
-                    if (logged_in) |login| {
-                        _ = login;
-                        const referer = if (req.get_header("Referer")) |ref| ref else "/post";
-
-                        try html_form(&res, "/post", .{}, .{
-                            .{ "type=\"hidden\" name=\"referer\" value=\"{s}\"", .{referer} },
-                            "type=\"text\" name=\"text\"",
-                            "type=\"submit\" value=\"Post\"",
-                        });
-                    } else {
-                        try res.write("not logged in", .{});
-                    }
-                } else if (std.mem.eql(u8, req.target, "/edit")) {
-                    if (logged_in) |login| {
-                        try res.write("<br />Username: ", .{});
-                        try html_form(&res, "/set_username", .{}, .{
-                            .{ "type=\"text\" name=\"username\" placeholder=\"{s}\"", .{login.user.name.constSlice()} },
-                            "type=\"submit\" value=\"Change\"",
-                        });
-                        try res.write("<br />Display Name: ", .{});
-                        try html_form(&res, "/set_display_name", .{}, .{
-                            .{ "type=\"text\" name=\"display_name\" placeholder=\"{s}\"", .{login.user.display_name.constSlice()} },
-                            "type=\"submit\" value=\"Change\"",
-                        });
-                        try res.write("<br />Password: ", .{});
-                        try html_form(&res, "/set_password", .{}, .{
-                            "type=\"text\" name=\"password\"",
-                            "type=\"submit\" value=\"Change\"",
-                        });
-                    } else {
-                        try res.write("not logged in", .{});
-                    }
-                } else if (std.mem.eql(u8, req.target, "/")) {
-                    if (logged_in) |login| {
-                        try write_timeline(&res, txn, logged_in, login.user);
-                    } else {
-                        // TODO: generic home
-                        try res.write("Homepage", .{});
-                    }
-                } else {
-                    try res.redirect("/");
-                }
-                try write_end(&res);
-                try res.send();
-            }
-            // api
-            else {
-                if (std.mem.eql(u8, req.target, "/register")) {
-                    // TODO: handle args not supplied
-                    const username = req.get_value("username").?;
-                    const password = req.get_value("password").?;
-
-                    std.debug.print("New user: {s} {s}\n", .{ username, password });
-                    _ = try Chirp.register_user(env, username, password);
-                } else if (std.mem.eql(u8, req.target, "/login")) {
-                    // TODO: handle args not supplied
-                    const username = req.get_value("username").?;
-                    const password = req.get_value("password").?;
-
-                    std.debug.print("New login: {s} {s}\n", .{ username, password });
-                    if (Chirp.login_user(env, username, password)) |session_token| {
-                        res.status = .see_other;
-                        try res.add_header(
-                            "Set-Cookie",
-                            .{ "session_token={x}; HttpOnly", .{session_token} },
-                        );
-                    } else |err| {
-                        std.debug.print("login_user err: {}\n", .{err});
-                    }
-                } else if (std.mem.eql(u8, req.target, "/logout")) {
-                    if (logged_in) |login| {
-                        try Chirp.logout_user(env, login.session_token);
-
-                        try res.add_header(
-                            "Set-Cookie",
-                            .{"session_token=deleted; Expires=Thu, 01 Jan 1970 00:00:00 GMT"},
-                        );
-                    }
-                } else if (std.mem.eql(u8, req.target, "/set_username")) {
-                    const login = logged_in orelse return error.NotLoggedIn;
-                    const username_str = req.get_value("username") orelse return error.NoUsername;
-                    const username = try Username.fromSlice(username_str);
-
-                    const txn = try env.txn();
-                    defer txn.commit() catch {};
-
-                    const user_ids = try Db.user_ids(txn);
-
-                    if (!try user_ids.has(username)) {
-                        try user_ids.del(login.user.name);
-                        try user_ids.put(username, login.user.id);
-
-                        const users = try Db.users(txn);
-                        var user = login.user;
-                        user.name = username;
-                        try users.put(login.user.id, user);
-                    }
-                } else if (std.mem.eql(u8, req.target, "/set_display_name")) {
-                    const login = logged_in orelse return error.NotLoggedIn;
-                    const display_name_str = req.get_value("display_name") orelse return error.NoDisplayName;
-                    const display_name = try DisplayName.fromSlice(display_name_str);
-
-                    const txn = try env.txn();
-                    defer txn.commit() catch {};
-
-                    const users = try Db.users(txn);
-                    var user = login.user;
-                    user.display_name = display_name;
-                    try users.put(login.user.id, user);
-                } else if (std.mem.eql(u8, req.target, "/set_password")) {
-                    const login = logged_in orelse return error.NotLoggedIn;
-                    const password_str = req.get_value("password") orelse return error.NoPassword;
-
-                    const txn = try env.txn();
-                    defer txn.commit() catch {};
-
-                    const users = try Db.users(txn);
-                    var user = login.user;
-                    user.password_hash = try Chirp.hash_password(password_str);
-                    try users.put(login.user.id, user);
-                } else if (std.mem.eql(u8, req.target, "/post")) {
-                    if (logged_in) |login| {
-                        const text = req.get_value("text").?;
-                        const has_referer = req.get_value("referer");
-                        try Chirp.post(env, login.user.id, text);
-                        if (has_referer) |r| {
-                            const decoded = try decode(r);
-                            try res.redirect(decoded.constSlice());
-                        }
-                    }
-                } else if (std.mem.eql(u8, req.target, "/comment")) {
-                    if (logged_in) |login| {
-                        const text = req.get_value("text") orelse return error.NoText;
-                        const post_id_str = req.get_value("post_id") orelse return error.NoPostId;
-                        const post_id = try parse_enum(PostId, post_id_str, 16);
-
-                        try Chirp.comment(env, login.user.id, post_id, text);
-                    }
-                } else if (std.mem.eql(u8, req.target, "/quote")) {
-                    if (logged_in) |login| {
-                        const text = req.get_value("text") orelse return error.NoText;
-                        const post_id_str = req.get_value("post_id") orelse return error.NoPostId;
-                        const post_id = try parse_enum(PostId, post_id_str, 16);
-
-                        try Chirp.quote(env, login.user.id, post_id, text);
-                    }
-                } else if (std.mem.eql(u8, req.target, "/upvote")) {
-                    const login = logged_in orelse return error.NotLoggedIn;
+fn handle_error(env: lmdb.Env, req: http.Request) !void {
+    _ = env;
+    var res = http.Response.init(req, &res_head_buffer, &res_body_buffer);
+    try write_start(&res);
+    try res.write("Oops, something went terribly wrong there D:", .{});
+    try write_end(&res);
+    try res.send();
+}
+fn handle_request(env: lmdb.Env, req: http.Request) !void {
+    // std.debug.print("[{}]: {s}\n", .{ req.method, req.target });
+    // std.debug.print("[{}]: {s}\n", .{ req.method, req.head.? });
 
-                    const post_id_str = req.get_value("post_id") orelse return error.NoPostId;
-                    const post_id: PostId = @enumFromInt(try std.fmt.parseUnsigned(u64, post_id_str, 16));
+    // reponse
+    var res = http.Response.init(req, &res_head_buffer, &res_body_buffer);
 
-                    try Chirp.vote(env, post_id, login.user.id, .Up);
-                } else if (std.mem.eql(u8, req.target, "/downvote")) {
-                    const login = logged_in orelse return error.NotLoggedIn;
+    // check session token
+    const logged_in: ?Login = try check_login(env, req, &res);
 
-                    const post_id_str = req.get_value("post_id") orelse return error.NoPostId;
-                    const post_id: PostId = @enumFromInt(try std.fmt.parseUnsigned(u64, post_id_str, 16));
+    // html
+    if (req.method == .GET) {
+        try write_start(&res);
+        try write_header(&res, logged_in);
 
-                    try Chirp.vote(env, post_id, login.user.id, .Down);
-                } else if (std.mem.eql(u8, req.target, "/follow")) {
-                    const login = logged_in orelse return error.NotLoggedIn;
+        const txn = try env.txn();
+        defer txn.abort();
 
-                    const user_id_str = req.get_value("user_id") orelse return error.NoUserId;
-                    const user_id: UserId = @enumFromInt(try std.fmt.parseUnsigned(u64, user_id_str, 16));
+        const get = GET{
+            .txn = txn,
+            .req = req,
+            .res = &res,
+            .logged_in = logged_in,
+        };
+        if (try get.handle()) {} else {
+            try res.redirect("/");
+        }
 
-                    try Chirp.follow(env, login.user.id, user_id);
-                } else if (std.mem.eql(u8, req.target, "/quit")) {
-                    if (req.get_header("Referer")) |ref| {
-                        try res.redirect(ref);
-                    } else {
-                        try res.redirect("/");
-                    }
-                    try res.send();
-                    break :accept;
-                } else {
-                    try res.write("<p>[POST] {s}</p>", .{req.target});
-                }
+        try write_end(&res);
+        try res.send();
+    }
+    // api
+    else {
+        const post = POST{
+            .env = env,
+            .req = req,
+            .res = &res,
+            .logged_in = logged_in,
+        };
+        if (try post.handle()) {} else {
+            try res.write("<p>[POST] {s}</p>", .{req.target});
+        }
 
-                if (!res.has_header("Location")) {
-                    if (req.get_header("Referer")) |ref| {
-                        try res.redirect(ref);
-                    } else {
-                        try res.redirect("/");
-                    }
-                }
-                try res.send();
+        if (!res.has_header("Location")) {
+            if (req.get_header("Referer")) |ref| {
+                try res.redirect(ref);
+            } else {
+                try res.redirect("/");
             }
         }
+        try res.send();
     }
 }