diff --git a/.github/workflows/android-apk.yml b/.github/workflows/android-apk.yml
index d3b9d35..258699a 100644
--- a/.github/workflows/android-apk.yml
+++ b/.github/workflows/android-apk.yml
@@ -15,13 +15,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
+        # v5 runs on Node 24 (now the default runtime).
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
 
       - name: Set up Node
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        # v7 runs on Node 24.
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020
         with:
           node-version: 22
-          cache: npm
+          package-manager-cache: false
 
       - name: Install Node dependencies
         run: npm ci
@@ -30,11 +32,11 @@ jobs:
         run: npx cap sync
 
       - name: Set up JDK
-        uses: actions/setup-java@d7793b545071e98d581d3bf084a51c3213318a07
+        # v5 runs on Node 24.
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165
         with:
           distribution: temurin
           java-version: 21
-          cache: gradle
 
       - name: Make gradlew executable
         run: chmod +x ./android/gradlew
@@ -42,9 +44,12 @@ jobs:
       - name: Build debug APK
         run: |
           unset ANDROID_SDK_ROOT
-          ./gradlew assembleDebug
+          ./gradlew --no-daemon --stacktrace :app:assembleDebug
         working-directory: ./android
 
+      - name: Verify APK output
+        run: test -f ./android/app/build/outputs/apk/debug/app-debug.apk
+
       - name: Prepare artifact
         run: |
           mkdir -p ./out
diff --git a/internal/http/handlers.go b/internal/http/handlers.go
index d44cd16..4ddca0d 100644
--- a/internal/http/handlers.go
+++ b/internal/http/handlers.go
@@ -4,6 +4,7 @@ import (
 	"bytes"
 	"context"
 	"crypto/hmac"
+	"crypto/md5"
 	"crypto/rand"
 	"crypto/sha256"
 	"encoding/base32"
@@ -1475,39 +1476,44 @@ func GitLabAvatarHandler(c *gin.Context) {
 		return
 	}
 
-	apiURL := fmt.Sprintf("https://gitlab.com/api/v4/users?email=%s", url.QueryEscape(email))
+	// GitLab.com ya no permite /api/v4/users sin token (403): el avatar se resuelve
+	// por Gravatar (esquema que GitLab usa por defecto) sin depender de la API.
+	// Con GITLAB_TOKEN configurado se consulta la API real para avatar/username.
+	username := ""
+	avatarURL := ""
 
-	req, err := http.NewRequest("GET", apiURL, nil)
-	if err != nil {
-		c.JSON(http.StatusInternalServerError, gin.H{"error": "proxy error"})
-		return
-	}
-
-	glToken := os.Getenv("GITLAB_TOKEN")
-	if glToken != "" {
-		req.Header.Set("PRIVATE-TOKEN", glToken)
-	}
-	req.Header.Set("Accept", "application/json")
-
-	client := &http.Client{Timeout: 10 * time.Second}
-	resp, err := client.Do(req)
-	if err != nil {
-		c.JSON(http.StatusBadGateway, gin.H{"error": "gitlab unreachable"})
-		return
+	if glToken := os.Getenv("GITLAB_TOKEN"); glToken != "" {
+		apiURL := fmt.Sprintf("https://gitlab.com/api/v4/users?email=%s", url.QueryEscape(email))
+		req, err := http.NewRequest("GET", apiURL, nil)
+		if err == nil {
+			req.Header.Set("PRIVATE-TOKEN", glToken)
+			req.Header.Set("Accept", "application/json")
+			client := &http.Client{Timeout: 8 * time.Second}
+			resp, err := client.Do(req)
+			if err == nil {
+				body, _ := io.ReadAll(resp.Body)
+				resp.Body.Close()
+				if resp.StatusCode == http.StatusOK {
+					var users []struct {
+						AvatarURL string `json:"avatar_url"`
+						Username  string `json:"username"`
+					}
+					if json.Unmarshal(body, &users) == nil && len(users) > 0 {
+						username = users[0].Username
+						avatarURL = users[0].AvatarURL
+					}
+				}
+			}
+		}
 	}
-	defer resp.Body.Close()
-
-	body, _ := io.ReadAll(resp.Body)
 
-	var users []struct {
-		AvatarURL string `json:"avatar_url"`
-	}
-	if err := json.Unmarshal(body, &users); err != nil || len(users) == 0 {
-		c.JSON(http.StatusOK, gin.H{"avatar_url": ""})
-		return
+	if avatarURL == "" {
+		// Fallback: Gravatar, mismo esquema que GitLab para avatares por defecto.
+		sum := md5.Sum([]byte(strings.ToLower(strings.TrimSpace(email))))
+		avatarURL = fmt.Sprintf("https://www.gravatar.com/avatar/%s?d=identicon&s=64", hex.EncodeToString(sum[:]))
 	}
 
-	c.JSON(http.StatusOK, gin.H{"avatar_url": users[0].AvatarURL})
+	c.JSON(http.StatusOK, gin.H{"avatar_url": avatarURL, "username": username})
 }
 
 func GitLabCommitsHandler(c *gin.Context) {
@@ -2994,6 +3000,16 @@ func CodebergProxyHandler(c *gin.Context) {
 	}
 	defer resp.Body.Close()
 
+	// Gitea/Codeberg devuelve 404 en /contributors cuando el repo tiene demasiada
+	// historia (el cálculo de autores se aborta server-side). Se degrada con una
+	// lista vacía para que el frontend oculte la sección sin error de red.
+	if resp.StatusCode == http.StatusNotFound && strings.HasSuffix(path, "/contributors") {
+		c.Writer.Header().Set("Content-Type", "application/json")
+		c.Writer.WriteHeader(http.StatusOK)
+		c.Writer.Write([]byte("[]"))
+		return
+	}
+
 	for _, h := range []string{"Content-Type", "Content-Length", "Cache-Control", "ETag", "Link", "X-Total-Count", "X-Total", "X-Page", "X-PerPage", "X-PageCount", "X-HasMore"} {
 		if v := resp.Header.Get(h); v != "" {
 			c.Writer.Header().Set(h, v)
@@ -3330,6 +3346,1203 @@ func searchGitLab(query string) []gin.H {
 	return results
 }
 
+func UsersSearchHandler(c *gin.Context) {
+	query := strings.TrimSpace(c.Query("q"))
+	provider := c.Query("provider")
+
+	if query == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "query parameter required"})
+		return
+	}
+
+	// Token del cliente (localStorage) como respaldo cuando el servidor no tiene env token.
+	clientToken := ""
+	if auth := c.GetHeader("Authorization"); auth != "" {
+		clientToken = strings.TrimSpace(strings.TrimPrefix(strings.TrimPrefix(auth, "token "), "Bearer "))
+	}
+
+	// Fan out provider searches concurrently
+	type searchResult struct {
+		results []gin.H
+	}
+
+	// Deadline global: los reintentos de proveedores lentos no deben extender
+	// la latencia total del request de forma indefinida.
+	ctx, cancel := context.WithTimeout(c.Request.Context(), 45*time.Second)
+	defer cancel()
+
+	var wg sync.WaitGroup
+	ghChan := make(chan searchResult, 1)
+	glChan := make(chan searchResult, 1)
+	cbChan := make(chan searchResult, 1)
+
+	if provider == "gh" || provider == "all" || provider == "" {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			ghChan <- searchResult{results: searchGitHubUsers(query, clientToken)}
+		}()
+	} else {
+		ghChan <- searchResult{results: []gin.H{}}
+	}
+
+	if provider == "gl" || provider == "all" || provider == "" {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			glChan <- searchResult{results: searchGitLabUsers(query, clientToken)}
+		}()
+	} else {
+		glChan <- searchResult{results: []gin.H{}}
+	}
+
+	if provider == "cb" || provider == "all" || provider == "" {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			cbChan <- searchResult{results: searchCodebergUsers(query, clientToken)}
+		}()
+	} else {
+		cbChan <- searchResult{results: []gin.H{}}
+	}
+
+	done := make(chan struct{})
+	go func() {
+		wg.Wait()
+		close(done)
+	}()
+	select {
+	case <-done:
+	case <-ctx.Done():
+		c.JSON(http.StatusGatewayTimeout, gin.H{"error": "upstream search timed out"})
+		return
+	}
+	close(ghChan)
+	close(glChan)
+	close(cbChan)
+
+	// Collect and merge results
+	results := []gin.H{}
+	results = append(results, (<-ghChan).results...)
+	results = append(results, (<-glChan).results...)
+	results = append(results, (<-cbChan).results...)
+
+	c.JSON(http.StatusOK, gin.H{
+		"query":   query,
+		"results": results,
+	})
+}
+
+// CodeSearchHandler keeps provider credentials on the server, matching the
+// repository and user search endpoints. GitHub's code search rejects anonymous
+// browser requests, so calling it from repo.html causes a visible 401.
+func CodeSearchHandler(c *gin.Context) {
+	query := strings.TrimSpace(c.Query("q"))
+	owner := strings.TrimSpace(c.Query("owner"))
+	repo := strings.TrimSpace(c.Query("repo"))
+	provider := c.DefaultQuery("provider", "gh")
+	if query == "" || owner == "" || repo == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "q, owner and repo parameters are required"})
+		return
+	}
+	if provider != "gh" {
+		c.JSON(http.StatusNotImplemented, gin.H{"error": "provider code search is not available"})
+		return
+	}
+
+	clientToken := strings.TrimSpace(strings.TrimPrefix(strings.TrimPrefix(c.GetHeader("Authorization"), "token "), "Bearer "))
+	token := os.Getenv("GITHUB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token == "" {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "GitHub code search requires the bot token or a user token"})
+		return
+	}
+
+	apiURL := fmt.Sprintf("https://api.github.com/search/code?q=%s&per_page=100", url.QueryEscape(fmt.Sprintf("%s repo:%s/%s", query, owner, repo)))
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "could not create GitHub code search request"})
+		return
+	}
+	req.Header.Set("Authorization", "token "+token)
+	req.Header.Set("Accept", "application/vnd.github+json")
+	req.Header.Set("User-Agent", "gitGost")
+	resp, err := (&http.Client{Timeout: 10 * time.Second}).Do(req)
+	if err != nil {
+		utils.Log("GitHub code search error: %v", err)
+		c.JSON(http.StatusBadGateway, gin.H{"error": "GitHub code search is unavailable"})
+		return
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitHub code search returned status: %d", resp.StatusCode)
+		c.JSON(http.StatusBadGateway, gin.H{"error": "GitHub code search failed"})
+		return
+	}
+
+	var data struct {
+		Items []struct {
+			Name string `json:"name"`
+			Path string `json:"path"`
+		} `json:"items"`
+	}
+	if err := json.NewDecoder(resp.Body).Decode(&data); err != nil {
+		c.JSON(http.StatusBadGateway, gin.H{"error": "could not read GitHub code search results"})
+		return
+	}
+	results := make([]gin.H, 0, len(data.Items))
+	for _, item := range data.Items {
+		results = append(results, gin.H{"name": item.Name, "path": item.Path})
+	}
+	c.JSON(http.StatusOK, gin.H{"results": results})
+}
+
+// GitHubPackagesHandler avoids exposing GitHub's package endpoint directly to
+// browsers. It uses the same bot-token-first policy as repository/user search.
+func GitHubPackagesHandler(c *gin.Context) {
+	owner := strings.TrimSpace(c.Param("owner"))
+	if owner == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "owner parameter is required"})
+		return
+	}
+	clientToken := strings.TrimSpace(strings.TrimPrefix(strings.TrimPrefix(c.GetHeader("Authorization"), "token "), "Bearer "))
+	token := os.Getenv("GITHUB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token == "" {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "GitHub packages require the bot token or a user token"})
+		return
+	}
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	for _, kind := range []string{"users", "orgs"} {
+		apiURL := fmt.Sprintf("https://api.github.com/%s/%s/packages?per_page=100", kind, url.PathEscape(owner))
+		req, err := http.NewRequest("GET", apiURL, nil)
+		if err != nil {
+			continue
+		}
+		req.Header.Set("Authorization", "token "+token)
+		req.Header.Set("Accept", "application/vnd.github+json")
+		req.Header.Set("User-Agent", "gitGost")
+		resp, err := client.Do(req)
+		if err != nil {
+			continue
+		}
+		if resp.StatusCode == http.StatusNotFound {
+			resp.Body.Close()
+			continue
+		}
+		if resp.StatusCode != http.StatusOK {
+			resp.Body.Close()
+			utils.Log("GitHub packages returned status: %d", resp.StatusCode)
+			c.JSON(resp.StatusCode, gin.H{"error": "GitHub packages request failed"})
+			return
+		}
+		var packages []gin.H
+		err = json.NewDecoder(resp.Body).Decode(&packages)
+		resp.Body.Close()
+		if err != nil {
+			c.JSON(http.StatusBadGateway, gin.H{"error": "could not read GitHub packages"})
+			return
+		}
+		c.JSON(http.StatusOK, packages)
+		return
+	}
+	c.JSON(http.StatusNotFound, gin.H{"error": "GitHub packages owner was not found"})
+}
+
+func searchGitHubUsers(query, clientToken string) []gin.H {
+	results := []gin.H{}
+
+	apiURL := fmt.Sprintf("https://api.github.com/search/users?q=%s&per_page=100", url.QueryEscape(query))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return results
+	}
+	token := os.Getenv("GITHUB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("Authorization", "token "+token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		utils.Log("GitHub users search error: %v", err)
+		return results
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitHub users search returned status: %d", resp.StatusCode)
+		return results
+	}
+
+	var data struct {
+		Items []struct {
+			Login   string `json:"login"`
+			Avatar  string `json:"avatar_url"`
+			HTMLURL string `json:"html_url"`
+		} `json:"items"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&data); err != nil {
+		utils.Log("GitHub users search decode error: %v", err)
+		return results
+	}
+
+	for _, item := range data.Items {
+		results = append(results, gin.H{
+			"provider":   "github",
+			"username":   item.Login,
+			"name":       "",
+			"avatar_url": item.Avatar,
+			"url":        item.HTMLURL,
+		})
+	}
+
+	return results
+}
+
+func searchGitLabUsers(query, clientToken string) []gin.H {
+	results := []gin.H{}
+
+	apiURL := fmt.Sprintf("https://gitlab.com/api/v4/users?search=%s&per_page=100", url.QueryEscape(query))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return results
+	}
+	token := os.Getenv("GITLAB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("PRIVATE-TOKEN", token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		utils.Log("GitLab users search error: %v", err)
+		return results
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitLab users search returned status: %d", resp.StatusCode)
+		return results
+	}
+
+	var data []struct {
+		Username string `json:"username"`
+		Name     string `json:"name"`
+		Avatar   string `json:"avatar_url"`
+		WebURL   string `json:"web_url"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&data); err != nil {
+		utils.Log("GitLab users search decode error: %v", err)
+		return results
+	}
+
+	for _, item := range data {
+		results = append(results, gin.H{
+			"provider":   "gitlab",
+			"username":   item.Username,
+			"name":       item.Name,
+			"avatar_url": item.Avatar,
+			"url":        item.WebURL,
+		})
+	}
+
+	return results
+}
+
+func searchCodebergUsers(query, clientToken string) []gin.H {
+	results := []gin.H{}
+
+	params := url.Values{}
+	params.Set("q", query)
+	params.Set("limit", "100")
+	apiURL := "https://codeberg.org/api/v1/users/search?" + params.Encode()
+
+	client := &http.Client{Timeout: 45 * time.Second}
+
+	token := os.Getenv("CODEBERG_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+
+	// Codeberg exige el scope read:user para users/search; si el token configurado
+	// no lo tiene responde 403, así que se reintenta sin token (la búsqueda
+	// anónima funciona). El segundo intento también cubre timeouts puntuales.
+	for attempt := 0; attempt < 2; attempt++ {
+		req, err := http.NewRequest("GET", apiURL, nil)
+		if err != nil {
+			return results
+		}
+		req.Header.Set("User-Agent", "gitGost/1.0")
+		if token != "" {
+			req.Header.Set("Authorization", "token "+token)
+		}
+		resp, err := client.Do(req)
+		if err == nil && resp.StatusCode == http.StatusOK {
+			var data struct {
+				Data []struct {
+					Login    string `json:"login"`
+					FullName string `json:"full_name"`
+					Avatar   string `json:"avatar_url"`
+					HTMLURL  string `json:"html_url"`
+				} `json:"data"`
+			}
+
+			if err := json.NewDecoder(resp.Body).Decode(&data); err != nil {
+				resp.Body.Close()
+				utils.Log("Codeberg users search decode error: %v", err)
+				return results
+			}
+			resp.Body.Close()
+
+			for _, item := range data.Data {
+				results = append(results, gin.H{
+					"provider":   "codeberg",
+					"username":   item.Login,
+					"name":       item.FullName,
+					"avatar_url": item.Avatar,
+					"url":        item.HTMLURL,
+				})
+			}
+			return results
+		}
+		if resp != nil {
+			resp.Body.Close()
+		}
+		if err != nil {
+			utils.Log("Codeberg users search error: %v", err)
+		} else {
+			utils.Log("Codeberg users search returned status: %d", resp.StatusCode)
+		}
+		// Fallback: reintentar sin token si el token no sirvió (scope insuficiente).
+		token = ""
+	}
+
+	return results
+}
+
+type profileResult struct {
+	profile  gin.H
+	notFound bool
+}
+
+func UserProfileHandler(c *gin.Context) {
+	provider := c.Query("provider")
+	username := strings.TrimSpace(c.Query("user"))
+
+	if username == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "user parameter required"})
+		return
+	}
+
+	// Token del cliente (localStorage) como respaldo cuando el servidor no tiene env token.
+	clientToken := ""
+	if auth := c.GetHeader("Authorization"); auth != "" {
+		clientToken = strings.TrimSpace(strings.TrimPrefix(strings.TrimPrefix(auth, "token "), "Bearer "))
+	}
+
+	var result profileResult
+	switch provider {
+	case "gl":
+		result = gitLabUserProfile(username, clientToken)
+		if result.profile == nil && !result.notFound {
+			// Los grupos no se resuelven por /users; probar como grupo.
+			result = gitLabGroupProfile(username, clientToken)
+		}
+	case "cb":
+		result = codebergUserProfile(username, clientToken)
+		if result.profile == nil && !result.notFound {
+			result = codebergOrgProfile(username, clientToken)
+		}
+	default:
+		// GitHub resuelve usuarios y organizaciones por /users/{login}.
+		result = gitHubUserProfile(username, clientToken)
+	}
+
+	if result.profile == nil {
+		if result.notFound {
+			c.JSON(http.StatusNotFound, gin.H{"error": "user not found"})
+		} else {
+			c.JSON(http.StatusBadGateway, gin.H{"error": "upstream service error"})
+		}
+		return
+	}
+	c.JSON(http.StatusOK, result.profile)
+}
+
+func gitHubUserProfile(username, clientToken string) profileResult {
+	apiURL := fmt.Sprintf("https://api.github.com/users/%s", url.PathEscape(username))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return profileResult{profile: nil, notFound: false}
+	}
+	token := os.Getenv("GITHUB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("Authorization", "token "+token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		utils.Log("GitHub user profile error: %v", err)
+		return profileResult{profile: nil, notFound: false}
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitHub user profile returned status: %d", resp.StatusCode)
+		notFound := resp.StatusCode == http.StatusNotFound
+		return profileResult{profile: nil, notFound: notFound}
+	}
+
+	var d struct {
+		Login       string `json:"login"`
+		Name        string `json:"name"`
+		Avatar      string `json:"avatar_url"`
+		Bio         string `json:"bio"`
+		Location    string `json:"location"`
+		Followers   int    `json:"followers"`
+		Following   int    `json:"following"`
+		PublicRepos int    `json:"public_repos"`
+		HTMLURL     string `json:"html_url"`
+		CreatedAt   string `json:"created_at"`
+		Blog        string `json:"blog"`
+		Type        string `json:"type"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&d); err != nil {
+		utils.Log("GitHub user profile decode error: %v", err)
+		return profileResult{profile: nil, notFound: false}
+	}
+
+	userType := "user"
+	if d.Type == "Organization" {
+		userType = "org"
+	}
+
+	return profileResult{
+		profile: gin.H{
+			"provider":     "github",
+			"username":     d.Login,
+			"name":         d.Name,
+			"avatar_url":   d.Avatar,
+			"bio":          d.Bio,
+			"location":     d.Location,
+			"followers":    d.Followers,
+			"following":    d.Following,
+			"public_repos": d.PublicRepos,
+			"url":          d.HTMLURL,
+			"type":         userType,
+			"joined_at":    d.CreatedAt,
+			"website":      d.Blog,
+		},
+		notFound: false,
+	}
+}
+
+func gitLabUserProfile(username, clientToken string) profileResult {
+	apiURL := fmt.Sprintf("https://gitlab.com/api/v4/users?username=%s", url.QueryEscape(username))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return profileResult{profile: nil, notFound: false}
+	}
+	token := os.Getenv("GITLAB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("PRIVATE-TOKEN", token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		utils.Log("GitLab user profile error: %v", err)
+		return profileResult{profile: nil, notFound: false}
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitLab user profile returned status: %d", resp.StatusCode)
+		notFound := resp.StatusCode == http.StatusNotFound
+		return profileResult{profile: nil, notFound: notFound}
+	}
+
+	var data []struct {
+		ID       int    `json:"id"`
+		Username string `json:"username"`
+		Name     string `json:"name"`
+		Avatar   string `json:"avatar_url"`
+		Bio      string `json:"bio"`
+		Location string `json:"location"`
+		WebURL   string `json:"web_url"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&data); err != nil {
+		utils.Log("GitLab user profile decode error: %v", err)
+		return profileResult{profile: nil, notFound: false}
+	}
+	if len(data) == 0 {
+		return profileResult{profile: nil, notFound: true}
+	}
+
+	u := data[0]
+	return profileResult{
+		profile: gin.H{
+			"provider":   "gitlab",
+			"username":   u.Username,
+			"name":       u.Name,
+			"avatar_url": u.Avatar,
+			"bio":        u.Bio,
+			"location":   u.Location,
+			"followers":  gitLabUserCount(u.ID, "followers", clientToken),
+			"following":  gitLabUserCount(u.ID, "following", clientToken),
+			"url":        u.WebURL,
+			"type":       "user",
+		},
+		notFound: false,
+	}
+}
+
+func gitLabGroupProfile(username, clientToken string) profileResult {
+	apiURL := fmt.Sprintf("https://gitlab.com/api/v4/groups/%s", url.PathEscape(username))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return profileResult{profile: nil, notFound: false}
+	}
+	token := os.Getenv("GITLAB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("PRIVATE-TOKEN", token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		utils.Log("GitLab group profile error: %v", err)
+		return profileResult{profile: nil, notFound: false}
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitLab group profile returned status: %d", resp.StatusCode)
+		notFound := resp.StatusCode == http.StatusNotFound
+		return profileResult{profile: nil, notFound: notFound}
+	}
+
+	var g struct {
+		Path        string `json:"path"`
+		Name        string `json:"name"`
+		Avatar      string `json:"avatar_url"`
+		Description string `json:"description"`
+		WebURL      string `json:"web_url"`
+		CreatedAt   string `json:"created_at"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&g); err != nil {
+		utils.Log("GitLab group profile decode error: %v", err)
+		return profileResult{profile: nil, notFound: false}
+	}
+
+	return profileResult{
+		profile: gin.H{
+			"provider":   "gitlab",
+			"username":   g.Path,
+			"name":       g.Name,
+			"avatar_url": g.Avatar,
+			"bio":        g.Description,
+			"url":        g.WebURL,
+			"type":       "org",
+			"joined_at":  g.CreatedAt,
+		},
+		notFound: false,
+	}
+}
+
+func gitLabUserCount(userID int, kind, clientToken string) int {
+	apiURL := fmt.Sprintf("https://gitlab.com/api/v4/users/%d/%s?per_page=1", userID, kind)
+
+	client := &http.Client{Timeout: 5 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return 0
+	}
+	token := os.Getenv("GITLAB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("PRIVATE-TOKEN", token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		return 0
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		return 0
+	}
+	if total := resp.Header.Get("X-Total"); total != "" {
+		if n, err := strconv.Atoi(total); err == nil {
+			return n
+		}
+	}
+	return 0
+}
+
+func codebergUserProfile(username, clientToken string) profileResult {
+	apiURL := fmt.Sprintf("https://codeberg.org/api/v1/users/%s", url.PathEscape(username))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+
+	token := os.Getenv("CODEBERG_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+
+	var lastStatusCode int
+	// Codeberg exige el scope read:user para endpoints de usuarios; si el token
+	// configurado no lo tiene responde 403, así que se reintenta sin token.
+	for attempt := 0; attempt < 2; attempt++ {
+		req, err := http.NewRequest("GET", apiURL, nil)
+		if err != nil {
+			return profileResult{profile: nil, notFound: false}
+		}
+		if token != "" {
+			req.Header.Set("Authorization", "token "+token)
+		}
+		resp, err := client.Do(req)
+		if err == nil && resp.StatusCode == http.StatusOK {
+			defer resp.Body.Close()
+
+			var d struct {
+				Login       string `json:"login"`
+				FullName    string `json:"full_name"`
+				Avatar      string `json:"avatar_url"`
+				Description string `json:"description"`
+				Location    string `json:"location"`
+				Followers   int    `json:"followers_count"`
+				Following   int    `json:"following_count"`
+				PublicRepos int    `json:"public_repo_count"`
+				HTMLURL     string `json:"html_url"`
+				CreatedAt   string `json:"created"`
+				Website     string `json:"website"`
+				Type        string `json:"type"`
+			}
+
+			if err := json.NewDecoder(resp.Body).Decode(&d); err != nil {
+				utils.Log("Codeberg user profile decode error: %v", err)
+				return profileResult{profile: nil, notFound: false}
+			}
+
+			userType := "user"
+			if d.Type == "organization" {
+				userType = "org"
+			}
+
+			return profileResult{
+				profile: gin.H{
+					"provider":     "codeberg",
+					"username":     d.Login,
+					"name":         d.FullName,
+					"avatar_url":   d.Avatar,
+					"bio":          d.Description,
+					"location":     d.Location,
+					"followers":    d.Followers,
+					"following":    d.Following,
+					"public_repos": d.PublicRepos,
+					"url":          d.HTMLURL,
+					"type":         userType,
+					"joined_at":    d.CreatedAt,
+					"website":      d.Website,
+				},
+				notFound: false,
+			}
+		}
+		if resp != nil {
+			if resp.StatusCode != 0 {
+				lastStatusCode = resp.StatusCode
+			}
+			resp.Body.Close()
+		}
+		if err != nil {
+			utils.Log("Codeberg user profile error: %v", err)
+		} else {
+			utils.Log("Codeberg user profile returned status: %d", resp.StatusCode)
+		}
+		token = ""
+	}
+
+	notFound := lastStatusCode == http.StatusNotFound
+	return profileResult{profile: nil, notFound: notFound}
+}
+
+func codebergOrgProfile(username, clientToken string) profileResult {
+	apiURL := fmt.Sprintf("https://codeberg.org/api/v1/orgs/%s", url.PathEscape(username))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+
+	token := os.Getenv("CODEBERG_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+
+	var lastStatusCode int
+	// Codeberg exige el scope read:user para endpoints de usuarios; si el token
+	// configurado no lo tiene responde 403, así que se reintenta sin token.
+	for attempt := 0; attempt < 2; attempt++ {
+		req, err := http.NewRequest("GET", apiURL, nil)
+		if err != nil {
+			return profileResult{profile: nil, notFound: false}
+		}
+		if token != "" {
+			req.Header.Set("Authorization", "token "+token)
+		}
+		resp, err := client.Do(req)
+		if err == nil && resp.StatusCode == http.StatusOK {
+			defer resp.Body.Close()
+
+			var o struct {
+				Username    string `json:"username"`
+				FullName    string `json:"full_name"`
+				Avatar      string `json:"avatar_url"`
+				Description string `json:"description"`
+				Location    string `json:"location"`
+				HTMLURL     string `json:"html_url"`
+				CreatedAt   string `json:"created"`
+				Website     string `json:"website"`
+			}
+
+			if err := json.NewDecoder(resp.Body).Decode(&o); err != nil {
+				utils.Log("Codeberg org profile decode error: %v", err)
+				return profileResult{profile: nil, notFound: false}
+			}
+
+			return profileResult{
+				profile: gin.H{
+					"provider":   "codeberg",
+					"username":   o.Username,
+					"name":       o.FullName,
+					"avatar_url": o.Avatar,
+					"bio":        o.Description,
+					"location":   o.Location,
+					"url":        o.HTMLURL,
+					"type":       "org",
+					"joined_at":  o.CreatedAt,
+					"website":    o.Website,
+				},
+				notFound: false,
+			}
+		}
+		if resp != nil {
+			if resp.StatusCode != 0 {
+				lastStatusCode = resp.StatusCode
+			}
+			resp.Body.Close()
+		}
+		if err != nil {
+			utils.Log("Codeberg org profile error: %v", err)
+		} else {
+			utils.Log("Codeberg org profile returned status: %d", resp.StatusCode)
+		}
+		token = ""
+	}
+
+	notFound := lastStatusCode == http.StatusNotFound
+	return profileResult{profile: nil, notFound: notFound}
+}
+
+// UserReadmeHandler devuelve el README del repo de perfil {user}/{user} (gh/gl/cb).
+// Se sirve por el backend en vez de fetch directo del navegador: gitlab.com responde
+// 302 hacia /users/sign_in para repos inexistentes/privados y el navegador bloquea
+// esa redirección cross-origin por CORS.
+func UserReadmeHandler(c *gin.Context) {
+	provider := c.Query("provider")
+	username := strings.TrimSpace(c.Query("user"))
+
+	if username == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "user parameter required"})
+		return
+	}
+
+	// Token del cliente (localStorage) como respaldo cuando el servidor no tiene env token.
+	clientToken := ""
+	if auth := c.GetHeader("Authorization"); auth != "" {
+		clientToken = strings.TrimSpace(strings.TrimPrefix(strings.TrimPrefix(auth, "token "), "Bearer "))
+	}
+
+	var refs []string
+	basePrefix := ""
+	switch provider {
+	case "gl":
+		refs = []string{"HEAD", "master", "main"}
+		basePrefix = fmt.Sprintf("https://gitlab.com/%s/%s/-/raw/", url.PathEscape(username), url.PathEscape(username))
+	case "cb":
+		refs = []string{"main", "master"}
+		basePrefix = fmt.Sprintf("https://codeberg.org/%s/%s/raw/branch/", url.PathEscape(username), url.PathEscape(username))
+	default: // gh
+		refs = []string{"HEAD", "master", "main"}
+		basePrefix = fmt.Sprintf("https://raw.githubusercontent.com/%s/%s/", url.PathEscape(username), url.PathEscape(username))
+	}
+
+	// No seguir redirecciones: GitLab responde 302 a /users/sign_in cuando el repo no
+	// existe o es privado; sin esto terminaríamos con el HTML de la página de login.
+	client := &http.Client{
+		Timeout: 10 * time.Second,
+		CheckRedirect: func(req *http.Request, via []*http.Request) error {
+			return http.ErrUseLastResponse
+		},
+	}
+
+	for _, ref := range refs {
+		req, err := http.NewRequest(http.MethodGet, basePrefix+url.PathEscape(ref)+"/README.md", nil)
+		if err != nil {
+			continue
+		}
+		req.Header.Set("User-Agent", "gitGost/1.0")
+		if provider == "gl" {
+			if token := os.Getenv("GITLAB_TOKEN"); token != "" {
+				req.Header.Set("PRIVATE-TOKEN", token)
+			} else if clientToken != "" {
+				req.Header.Set("PRIVATE-TOKEN", clientToken)
+			}
+		}
+		resp, err := client.Do(req)
+		if err != nil {
+			continue
+		}
+		body, readErr := io.ReadAll(io.LimitReader(resp.Body, 2<<20)) // máx 2 MiB
+		resp.Body.Close()
+		if readErr != nil {
+			continue
+		}
+		contentType := strings.ToLower(resp.Header.Get("Content-Type"))
+		if resp.StatusCode >= 200 && resp.StatusCode < 300 &&
+			!strings.Contains(contentType, "html") &&
+			len(bytes.TrimSpace(body)) > 0 {
+			c.JSON(http.StatusOK, gin.H{
+				"content":  string(body),
+				"base_url": basePrefix + url.PathEscape(ref) + "/",
+			})
+			return
+		}
+	}
+
+	c.JSON(http.StatusNotFound, gin.H{"error": "readme not found"})
+}
+
+// UserReposHandler devuelve los repositorios públicos de un usuario u organización (gh/gl/cb).
+func UserReposHandler(c *gin.Context) {
+	provider := c.Query("provider")
+	username := strings.TrimSpace(c.Query("user"))
+	userType := strings.TrimSpace(c.Query("type"))
+
+	if username == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "user parameter required"})
+		return
+	}
+
+	// Token del cliente (localStorage) como respaldo cuando el servidor no tiene env token.
+	clientToken := ""
+	if auth := c.GetHeader("Authorization"); auth != "" {
+		clientToken = strings.TrimSpace(strings.TrimPrefix(strings.TrimPrefix(auth, "token "), "Bearer "))
+	}
+
+	var repos []gin.H
+	switch provider {
+	case "gl":
+		repos = gitLabUserRepos(username, userType, clientToken)
+	case "cb":
+		repos = codebergUserRepos(username, userType, clientToken)
+	default:
+		repos = gitHubUserRepos(username, clientToken)
+	}
+
+	if repos == nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "user not found"})
+		return
+	}
+	c.JSON(http.StatusOK, gin.H{"repos": repos})
+}
+
+func gitHubUserRepos(username, clientToken string) []gin.H {
+	apiURL := fmt.Sprintf("https://api.github.com/users/%s/repos?per_page=30&sort=updated&type=all", url.PathEscape(username))
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return nil
+	}
+	token := os.Getenv("GITHUB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("Authorization", "token "+token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		utils.Log("GitHub user repos error: %v", err)
+		return nil
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitHub user repos returned status: %d", resp.StatusCode)
+		return nil
+	}
+
+	var d []struct {
+		Name        string `json:"name"`
+		FullName    string `json:"full_name"`
+		Description string `json:"description"`
+		Language    string `json:"language"`
+		Stars       int    `json:"stargazers_count"`
+		Forks       int    `json:"forks_count"`
+		Fork        bool   `json:"fork"`
+		HTMLURL     string `json:"html_url"`
+		UpdatedAt   string `json:"updated_at"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&d); err != nil {
+		utils.Log("GitHub user repos decode error: %v", err)
+		return nil
+	}
+
+	repos := make([]gin.H, 0, len(d))
+	for _, r := range d {
+		repos = append(repos, gin.H{
+			"provider":    "github",
+			"full_name":   r.FullName,
+			"name":        r.Name,
+			"description": r.Description,
+			"language":    r.Language,
+			"stars":       r.Stars,
+			"forks":       r.Forks,
+			"fork":        r.Fork,
+			"html_url":    r.HTMLURL,
+			"updated_at":  r.UpdatedAt,
+		})
+	}
+	return repos
+}
+
+func gitLabUserRepos(username, userType, clientToken string) []gin.H {
+	// Los proyectos de un grupo se listan por /groups/{path}/projects; los de un usuario requieren su ID.
+	apiURL := ""
+	if userType == "org" {
+		apiURL = fmt.Sprintf("https://gitlab.com/api/v4/groups/%s/projects?per_page=30&order_by=updated_at&include_subgroups=false", url.PathEscape(username))
+	} else {
+		userID := gitLabUserID(username, clientToken)
+		if userID > 0 {
+			apiURL = fmt.Sprintf("https://gitlab.com/api/v4/users/%d/projects?per_page=30&order_by=updated_at", userID)
+		} else {
+			// Puede ser un grupo sin resolverse como usuario.
+			apiURL = fmt.Sprintf("https://gitlab.com/api/v4/groups/%s/projects?per_page=30&order_by=updated_at&include_subgroups=false", url.PathEscape(username))
+		}
+	}
+
+	client := &http.Client{Timeout: 10 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return nil
+	}
+	token := os.Getenv("GITLAB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("PRIVATE-TOKEN", token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		utils.Log("GitLab user repos error: %v", err)
+		return nil
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("GitLab user repos returned status: %d", resp.StatusCode)
+		return nil
+	}
+
+	var d []struct {
+		Name              string          `json:"name"`
+		PathWithNamespace string          `json:"path_with_namespace"`
+		Description       string          `json:"description"`
+		Stars             int             `json:"star_count"`
+		Forks             int             `json:"forks_count"`
+		ForkedFromProject json.RawMessage `json:"forked_from_project"`
+		WebURL            string          `json:"web_url"`
+		LastActivityAt    string          `json:"last_activity_at"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&d); err != nil {
+		utils.Log("GitLab user repos decode error: %v", err)
+		return nil
+	}
+
+	repos := make([]gin.H, 0, len(d))
+	for _, r := range d {
+		repos = append(repos, gin.H{
+			"provider":    "gitlab",
+			"full_name":   r.PathWithNamespace,
+			"name":        r.Name,
+			"description": r.Description,
+			"language":    "",
+			"stars":       r.Stars,
+			"forks":       r.Forks,
+			"fork":        len(r.ForkedFromProject) > 0,
+			"html_url":    r.WebURL,
+			"updated_at":  r.LastActivityAt,
+		})
+	}
+	return repos
+}
+
+func gitLabUserID(username, clientToken string) int {
+	apiURL := fmt.Sprintf("https://gitlab.com/api/v4/users?username=%s", url.QueryEscape(username))
+
+	client := &http.Client{Timeout: 5 * time.Second}
+	req, err := http.NewRequest("GET", apiURL, nil)
+	if err != nil {
+		return 0
+	}
+	token := os.Getenv("GITLAB_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+	if token != "" {
+		req.Header.Set("PRIVATE-TOKEN", token)
+	}
+	resp, err := client.Do(req)
+	if err != nil {
+		return 0
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		return 0
+	}
+
+	var data []struct {
+		ID int `json:"id"`
+	}
+	if err := json.NewDecoder(resp.Body).Decode(&data); err != nil || len(data) == 0 {
+		return 0
+	}
+	return data[0].ID
+}
+
+func codebergUserRepos(username, userType, clientToken string) []gin.H {
+	apiURL := ""
+	if userType == "org" {
+		apiURL = fmt.Sprintf("https://codeberg.org/api/v1/orgs/%s/repos?limit=30&sort=updated", url.PathEscape(username))
+	} else {
+		apiURL = fmt.Sprintf("https://codeberg.org/api/v1/users/%s/repos?limit=30&sort=updated", url.PathEscape(username))
+	}
+
+	client := &http.Client{Timeout: 10 * time.Second}
+
+	token := os.Getenv("CODEBERG_TOKEN")
+	if token == "" {
+		token = clientToken
+	}
+
+	doReq := func(url, token string) (*http.Response, error) {
+		req, err := http.NewRequest("GET", url, nil)
+		if err != nil {
+			return nil, err
+		}
+		if token != "" {
+			req.Header.Set("Authorization", "token "+token)
+		}
+		return client.Do(req)
+	}
+
+	resp, err := doReq(apiURL, token)
+	if err == nil && resp.StatusCode == http.StatusForbidden {
+		// Scope read:user faltante: reintentar sin token (la API pública funciona).
+		resp.Body.Close()
+		token = ""
+		resp, err = doReq(apiURL, token)
+	}
+	if err != nil {
+		utils.Log("Codeberg user repos error: %v", err)
+		return nil
+	}
+
+	// Si el usuario no existe, probar como organización.
+	if resp.StatusCode != http.StatusOK && userType != "org" {
+		resp.Body.Close()
+		apiURL = fmt.Sprintf("https://codeberg.org/api/v1/orgs/%s/repos?limit=30&sort=updated", url.PathEscape(username))
+		resp, err = doReq(apiURL, token)
+		if err != nil {
+			utils.Log("Codeberg org repos error: %v", err)
+			return nil
+		}
+	}
+	defer resp.Body.Close()
+
+	if resp.StatusCode != http.StatusOK {
+		utils.Log("Codeberg user repos returned status: %d", resp.StatusCode)
+		return nil
+	}
+
+	var d []struct {
+		Name        string `json:"name"`
+		FullName    string `json:"full_name"`
+		Description string `json:"description"`
+		Language    string `json:"language"`
+		Stars       int    `json:"stargazers_count"`
+		Forks       int    `json:"forks_count"`
+		Fork        bool   `json:"fork"`
+		HTMLURL     string `json:"html_url"`
+		UpdatedAt   string `json:"updated_at"`
+	}
+
+	if err := json.NewDecoder(resp.Body).Decode(&d); err != nil {
+		utils.Log("Codeberg user repos decode error: %v", err)
+		return nil
+	}
+
+	repos := make([]gin.H, 0, len(d))
+	for _, r := range d {
+		repos = append(repos, gin.H{
+			"provider":    "codeberg",
+			"full_name":   r.FullName,
+			"name":        r.Name,
+			"description": r.Description,
+			"language":    r.Language,
+			"stars":       r.Stars,
+			"forks":       r.Forks,
+			"fork":        r.Fork,
+			"html_url":    r.HTMLURL,
+			"updated_at":  r.UpdatedAt,
+		})
+	}
+	return repos
+}
+
 func TrendingHandler(c *gin.Context) {
 	provider := c.Param("provider")
 	sort := c.Query("sort")
diff --git a/internal/http/router.go b/internal/http/router.go
index 45e1f75..45cddb0 100644
--- a/internal/http/router.go
+++ b/internal/http/router.go
@@ -280,6 +280,12 @@ func SetupRouter(cfg *config.Config) *gin.Engine {
 		api.GET("/pr-status/:hash", PRStatusHandler)
 		api.GET("/pr/:hash/status", prCheckLimiter(), PRCheckHandler)
 		api.GET("/search", SearchHandler)
+		api.GET("/users/search", prCheckLimiter(), UsersSearchHandler)
+		api.GET("/code/search", prCheckLimiter(), CodeSearchHandler)
+		api.GET("/github/packages/:owner", prCheckLimiter(), GitHubPackagesHandler)
+		api.GET("/users/profile", prCheckLimiter(), UserProfileHandler)
+		api.GET("/users/repos", prCheckLimiter(), UserReposHandler)
+		api.GET("/users/readme", prCheckLimiter(), UserReadmeHandler)
 		api.GET("/trending/:provider", TrendingHandler)
 		api.GET("/cb-proxy/*path", prCheckLimiter(), CodebergProxyHandler)
 		api.GET("/gl-notes/:owner/:repo/:number", GitLabIssueNotesProxyHandler)
@@ -310,6 +316,14 @@ func SetupRouter(cfg *config.Config) *gin.Engine {
 	r.GET("/api/status", ServiceStatusHandler)
 
 	r.NoRoute(func(c *gin.Context) {
+		// Rutas limpias de perfil de usuario/organización: /gh/:username, /gl/:username, /cb/:username
+		if c.Request.Method == http.MethodGet {
+			parts := strings.Split(strings.Trim(c.Request.URL.Path, "/"), "/")
+			if len(parts) == 2 && (parts[0] == "gh" || parts[0] == "gl" || parts[0] == "cb") {
+				c.File("./web/profile.html")
+				return
+			}
+		}
 		c.File("./web/index.html")
 	})
 
diff --git a/web/index.html b/web/index.html
index af7a8a2..46f97ac 100644
--- a/web/index.html
+++ b/web/index.html
@@ -650,6 +650,10 @@
                 text-decoration: none;
             }
 
+            .repo-item-name .owner:hover {
+                text-decoration: underline;
+            }
+
             .repo-item-name .slash {
                 color: var(--fg-muted);
             }
@@ -675,6 +679,9 @@
                 font-size: 0.72rem;
                 color: var(--fg-muted);
                 flex-shrink: 0;
+                display: inline-flex;
+                align-items: center;
+                gap: 0.2em;
             }
 
             .repo-lang {
@@ -732,6 +739,117 @@
                 flex-shrink: 0;
             }
 
+            .user-item {
+                display: flex;
+                align-items: center;
+                justify-content: space-between;
+                gap: 0.5rem;
+                padding: 0.5rem 0;
+                border-bottom: 1px solid var(--border);
+                cursor: pointer;
+            }
+            .user-item-left {
+                display: flex;
+                align-items: center;
+                gap: 0.6rem;
+                min-width: 0;
+            }
+            .user-avatar {
+                width: 2.2rem;
+                height: 2.2rem;
+                border-radius: 50%;
+                flex-shrink: 0;
+                display: flex;
+                align-items: center;
+                justify-content: center;
+                font-family: "IBM Plex Mono", monospace;
+                font-size: 0.9rem;
+                color: var(--fg);
+                background: var(--bg-secondary);
+                border: 1px solid var(--border);
+            }
+            .user-info { min-width: 0; }
+            .user-name {
+                font-size: 0.82rem;
+                font-weight: 600;
+                color: var(--fg);
+                line-height: 1.3;
+                overflow: hidden;
+                text-overflow: ellipsis;
+                white-space: nowrap;
+            }
+            .user-username {
+                font-family: "IBM Plex Mono", monospace;
+                font-size: 0.7rem;
+                color: var(--fg-muted);
+            }
+            .user-profile-header {
+                display: flex;
+                align-items: center;
+                gap: 0.9rem;
+                margin-bottom: 0.75rem;
+            }
+            .user-profile-avatar {
+                width: 3.5rem;
+                height: 3.5rem;
+                border-radius: 50%;
+                border: 1px solid var(--border);
+            }
+            .user-profile-name {
+                font-size: 1rem;
+                font-weight: 600;
+                color: var(--fg);
+            }
+            .user-profile-username {
+                font-family: "IBM Plex Mono", monospace;
+                font-size: 0.75rem;
+                color: var(--fg-muted);
+                margin-bottom: 0.35rem;
+            }
+            .user-profile-bio {
+                font-size: 0.78rem;
+                color: var(--fg);
+                line-height: 1.5;
+                margin: 0 0 0.5rem;
+            }
+            .user-profile-location {
+                font-size: 0.75rem;
+                color: var(--fg-muted);
+                margin: 0 0 0.75rem;
+            }
+            .user-profile-stats {
+                display: flex;
+                gap: 0.75rem;
+                flex-wrap: wrap;
+                margin-bottom: 0.75rem;
+            }
+            .user-stat {
+                display: flex;
+                flex-direction: column;
+                background: var(--bg-secondary);
+                border: 1px solid var(--border);
+                border-radius: 3px;
+                padding: 0.4rem 0.7rem;
+            }
+            .user-stat-value {
+                font-family: "IBM Plex Mono", monospace;
+                font-size: 0.85rem;
+                font-weight: 600;
+                color: var(--fg);
+            }
+            .user-stat-label {
+                font-size: 0.65rem;
+                color: var(--fg-muted);
+            }
+            .user-profile-link {
+                display: inline-block;
+                font-family: "IBM Plex Mono", monospace;
+                font-size: 0.72rem;
+                color: var(--accent);
+                text-decoration: none;
+            }
+            .user-profile-link:hover { text-decoration: underline; }
+
             .statusbar {
                 background: var(--bg-secondary);
                 border-top: 1px solid var(--border);
@@ -1690,6 +1808,13 @@ <h2 class="rate-limit-modal-title" id="rate-limit-modal-title"></h2>
                     >
                         updated
                     </button>
+                    <button
+                        class="content-tab"
+                        data-tab="users"
+                        onclick="switchTab('users', this)"
+                    >
+                        users
+                    </button>
                     <button
                         class="content-tab"
                         data-tab="stars"
@@ -1806,6 +1931,27 @@ <h2 class="modal-title">Commands</h2>
             </div>
         </div>
 
+        <div
+            class="modal-overlay"
+            id="user-profile-modal"
+            onclick="closeModalOnOverlay(event, 'user-profile-modal')"
+        >
+            <div class="modal">
+                <div class="modal-header">
+                    <h2 class="modal-title">User Profile</h2>
+                    <button
+                        class="modal-close"
+                        onclick="closeModal('user-profile-modal')"
+                    >
+                        &times;
+                    </button>
+                </div>
+                <div class="modal-body">
+                    <div id="user-profile-content"></div>
+                </div>
+            </div>
+        </div>
+
         <div
             class="modal-overlay"
             id="push-modal"
@@ -2722,6 +2868,8 @@ <h3 style="margin-top: 0; color: var(--accent)">
                 return `<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" style="display:block;fill:#2185D0;"><title>Codeberg</title><path d="M11.955.49A12 12 0 0 0 0 12.49a12 12 0 0 0 1.832 6.373L11.838 5.928a.187.14 0 0 1 .324 0l10.006 12.935A12 12 0 0 0 24 12.49a12 12 0 0 0-12-12 12 12 0 0 0-.045 0zm.375 6.467l4.416 16.553a12 12 0 0 0 5.137-4.213z"/></svg>`;
             }
 
+            const STAR_ICON_HTML = `<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><path d="M0 0h24v24H0z" fill="none"/><path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M10.704 4.325a1.5 1.5 0 0 1 2.592 0l1.818 3.12a1.5 1.5 0 0 0 .978.712l3.53.764a1.5 1.5 0 0 1 .8 2.465l-2.405 2.693a1.5 1.5 0 0 0-.374 1.15l.363 3.593a1.5 1.5 0 0 1-2.097 1.524l-3.304-1.456a1.5 1.5 0 0 0-1.21 0l-3.304 1.456a1.5 1.5 0 0 1-2.097-1.524l.363-3.593a1.5 1.5 0 0 0-.373-1.15l-2.406-2.693a1.5 1.5 0 0 1 .8-2.465l3.53-.764a1.5 1.5 0 0 0 .979-.711z"/></svg>`;
+
             let languageColors = {};
             const LANGUAGE_COLORS_CACHE_KEY = 'gg_language_colors';
             const LANGUAGE_COLORS_CACHE_TTL = 24 * 60 * 60 * 1000;
@@ -2993,7 +3141,11 @@ <h3 style="margin-top: 0; color: var(--accent)">
                             closeSearchHistory();
                             removeSentinel();
                             scrollState.exhausted = true;
-                            performSearch(query);
+                            if (scrollState.tab === 'users') {
+                                searchUsers(query);
+                            } else {
+                                performSearch(query);
+                            }
                         }
                     }
                 });
@@ -3015,7 +3167,11 @@ <h3 style="margin-top: 0; color: var(--accent)">
                             closeSearchHistory();
                             removeSentinel();
                             scrollState.exhausted = true;
-                            performSearch(q);
+                            if (scrollState.tab === 'users') {
+                                searchUsers(q);
+                            } else {
+                                performSearch(q);
+                            }
                         }
                     });
                 }
@@ -3229,7 +3385,7 @@ <h3 style="margin-top: 0; color: var(--accent)">
                         ? escapeHtml(repo.description.slice(0, 120))
                         : "";
                     const count =
-                        repo.stars > 0 ? `(${formatNumber(repo.stars)})` : "";
+                        repo.stars > 0 ? `(${STAR_ICON_HTML}${formatNumber(repo.stars)})` : "";
                     const isDateTab = scrollState.tab === 'new' || scrollState.tab === 'updated';
                     const dateStr = scrollState.tab === 'new'
                         ? (repo.created_at || repo.updated_at || repo.pushed_at || '')
@@ -3246,7 +3402,7 @@ <h3 style="margin-top: 0; color: var(--accent)">
                         <div class="repo-item-normal">
                             <div class="repo-item-left">
                                 <div class="repo-item-name">
-                                    ${forgeIcon}<span class="owner">${ownerHtml}</span><span class="slash">/</span><span class="name">${nameHtml}</span>
+                                    ${forgeIcon}<a class="owner" href="/${provider}/${encodeURIComponent(owner)}" onclick="event.stopPropagation();">${ownerHtml}</a><span class="slash">/</span><span class="name">${nameHtml}</span>
                                 </div>
                                 ${desc ? `<div class="repo-item-desc">${desc}</div>` : ""}
                             </div>
@@ -3268,6 +3424,167 @@ <h3 style="margin-top: 0; color: var(--accent)">
                 }
             }
 
+            function loadUsersTab() {
+                const container = document.getElementById('repo-list');
+                if (container) {
+                    container.innerHTML = '<p style="color:var(--fg-secondary);font-size:0.78rem;">search for users from github, gitlab and codeberg — type a query and press Enter.</p>';
+                }
+            }
+
+            async function searchUsers(query) {
+                const container = document.getElementById("repo-list");
+                if (container) container.innerHTML = '<p style="color:var(--fg-secondary);font-size:0.78rem;">Searching...</p>';
+                let anyFailed = false;
+                try {
+                    const [gh, gl, cb] = await Promise.all([
+                        searchGitHubUsers(query).catch(() => { anyFailed = true; return []; }),
+                        searchGitLabUsers(query).catch(() => { anyFailed = true; return []; }),
+                        searchCodebergUsers(query).catch(() => { anyFailed = true; return []; }),
+                    ]);
+                    const results = [...gh, ...gl, ...cb];
+                    if (results.length > 0) {
+                        addToSearchHistory(query);
+                        renderUsers(results);
+                        updateStatusbar("users", query);
+                    } else if (anyFailed) {
+                        if (container) container.innerHTML = '<p style="color:var(--fg-secondary);font-size:0.78rem;">API not available.</p>';
+                    } else {
+                        if (container) {
+                            container.innerHTML = '';
+                            const p = document.createElement('p');
+                            p.style.color = 'var(--fg-secondary)';
+                            p.style.fontSize = '0.78rem';
+                            p.textContent = `No users found for "${query}".`;
+                            container.appendChild(p);
+                        }
+                    }
+                } catch {
+                    if (container) container.innerHTML = '<p style="color:var(--fg-secondary);font-size:0.78rem;">API not available.</p>';
+                }
+            }
+
+            async function searchGitHubUsers(query) {
+                const token = localStorage.getItem('gh_token');
+                const headers = token ? { 'Authorization': `token ${token}` } : {};
+                // Siempre por el backend: usa el token del servidor (y el local como respaldo), evitando 403 del navegador.
+                const res = await fetch(`${API_BASE}/api/users/search?q=${encodeURIComponent(query)}&provider=gh`, { headers });
+                if (!res.ok) throw new Error(`GitHub users search failed: ${res.status}`);
+                const data = await res.json();
+                return data.results || [];
+            }
+
+            async function searchGitLabUsers(query) {
+                const token = localStorage.getItem('gl_token');
+                const headers = token ? { 'Authorization': `token ${token}` } : {};
+                // Siempre por el backend: usa el token del servidor (y el local como respaldo), evitando 403 del navegador.
+                const res = await fetch(`${API_BASE}/api/users/search?q=${encodeURIComponent(query)}&provider=gl`, { headers });
+                if (!res.ok) throw new Error(`GitLab users search failed: ${res.status}`);
+                const data = await res.json();
+                return data.results || [];
+            }
+
+            async function searchCodebergUsers(query) {
+                const token = localStorage.getItem('cb_token');
+                const headers = token ? { 'Authorization': `token ${token}` } : {};
+                // Siempre por el backend: usa el token del servidor (y el local como respaldo), evitando 403 del navegador.
+                const res = await fetch(`${API_BASE}/api/users/search?q=${encodeURIComponent(query)}&provider=cb`, { headers });
+                if (!res.ok) throw new Error(`Codeberg users search failed: ${res.status}`);
+                const data = await res.json();
+                return data.results || [];
+            }
+
+            function renderUsers(users) {
+                const container = document.getElementById("repo-list");
+                if (!container) return;
+                container.innerHTML = '';
+                users.forEach((user) => {
+                    const item = document.createElement("div");
+                    item.className = "user-item";
+                    const safeUsername = escapeHtml(user.username || '');
+                    const safeName = escapeHtml(user.name || '');
+                    const safeAvatar = escapeHtml(user.avatar_url || '');
+                    const badgeColor = user.provider === 'gitlab' ? '#FC6D26' : user.provider === 'codeberg' ? '#2185D0' : '#181717';
+                    let providerLabel;
+                    if (user.provider === 'gitlab') providerLabel = gitlabBadgeIcon();
+                    else if (user.provider === 'codeberg') providerLabel = codebergBadgeIcon();
+                    else providerLabel = githubBadgeIcon();
+                    item.onclick = () => {
+                        const p = user.provider === 'gitlab' ? 'gl' : user.provider === 'codeberg' ? 'cb' : 'gh';
+                        window.location.href = `/${p}/${encodeURIComponent(user.username || '')}`;
+                    };
+                    item.innerHTML = `
+                        <div class="user-item-left">
+                            ${safeAvatar ? `<img class="user-avatar" src="${safeAvatar}" alt="" loading="lazy"/>` : `<span class="user-avatar">${safeUsername.slice(0, 1).toUpperCase()}</span>`}
+                            <div class="user-info">
+                                <div class="user-name">${safeName || safeUsername}</div>
+                                <div class="user-username">${safeUsername}</div>
+                            </div>
+                        </div>
+                        <span style="font-family:'IBM Plex Mono',monospace;font-size:0.65rem;color:${badgeColor};border:1px solid ${badgeColor};border-radius:3px;padding:0.1em 0.4em;opacity:0.8;flex-shrink:0;display:inline-flex;align-items:center;">${providerLabel}</span>
+                    `;
+                    container.appendChild(item);
+                });
+            }
+
+            async function openUserProfile(user) {
+                const content = document.getElementById('user-profile-content');
+                if (content) content.innerHTML = '<p style="color:var(--fg-secondary);font-size:0.78rem;">Loading profile...</p>';
+                openModal('user-profile-modal');
+                try {
+                    const p = await fetchUserProfile(user);
+                    if (content) content.innerHTML = p ? userProfileHtml(p) : '<p style="color:var(--fg-secondary);font-size:0.78rem;">Could not load profile.</p>';
+                } catch {
+                    if (content) content.innerHTML = '<p style="color:var(--fg-secondary);font-size:0.78rem;">Could not load profile.</p>';
+                }
+            }
+
+            async function fetchUserProfile(user) {
+                const token = user.provider === 'gitlab' ? localStorage.getItem('gl_token')
+                    : user.provider === 'codeberg' ? localStorage.getItem('cb_token')
+                    : localStorage.getItem('gh_token');
+                const headers = token ? { 'Authorization': `token ${token}` } : {};
+                const provider = user.provider === 'gitlab' ? 'gl' : user.provider === 'codeberg' ? 'cb' : 'gh';
+                // Siempre por el backend: usa el token del servidor (y el local como respaldo), evitando 403 del navegador.
+                const res = await fetch(`${API_BASE}/api/users/profile?provider=${provider}&user=${encodeURIComponent(user.username)}`, { headers });
+                if (!res.ok) return null;
+                return await res.json();
+            }
+
+            function userProfileHtml(p) {
+                const safeUsername = escapeHtml(p.username || '');
+                const safeName = escapeHtml(p.name || '');
+                const safeAvatar = escapeHtml(p.avatar_url || '');
+                const safeBio = escapeHtml(p.bio || '');
+                const safeLocation = escapeHtml(p.location || '');
+                const safeUrl = escapeHtml(p.url || '');
+                const badgeColor = p.provider === 'gitlab' ? '#FC6D26' : p.provider === 'codeberg' ? '#2185D0' : '#181717';
+                let providerLabel;
+                if (p.provider === 'gitlab') providerLabel = gitlabBadgeIcon();
+                else if (p.provider === 'codeberg') providerLabel = codebergBadgeIcon();
+                else providerLabel = githubBadgeIcon();
+                const providerName = p.provider === 'gitlab' ? 'gitlab' : p.provider === 'codeberg' ? 'codeberg' : 'github';
+                const stats = [];
+                if (p.followers !== undefined && p.followers !== null) stats.push(`<div class="user-stat"><span class="user-stat-value">${formatNumber(p.followers)}</span><span class="user-stat-label">followers</span></div>`);
+                if (p.following !== undefined && p.following !== null) stats.push(`<div class="user-stat"><span class="user-stat-value">${formatNumber(p.following)}</span><span class="user-stat-label">following</span></div>`);
+                if (p.public_repos !== undefined && p.public_repos !== null) stats.push(`<div class="user-stat"><span class="user-stat-value">${formatNumber(p.public_repos)}</span><span class="user-stat-label">public repos</span></div>`);
+                return `
+                    <div class="user-profile">
+                        <div class="user-profile-header">
+                            ${safeAvatar ? `<img class="user-profile-avatar" src="${safeAvatar}" alt=""/>` : ''}
+                            <div class="user-profile-id">
+                                <div class="user-profile-name">${safeName || safeUsername}</div>
+                                <div class="user-profile-username">${safeUsername}</div>
+                                <span style="font-family:'IBM Plex Mono',monospace;font-size:0.65rem;color:${badgeColor};border:1px solid ${badgeColor};border-radius:3px;padding:0.1em 0.4em;opacity:0.8;display:inline-flex;align-items:center;">${providerLabel}</span>
+                            </div>
+                        </div>
+                        ${safeBio ? `<p class="user-profile-bio">${safeBio}</p>` : ''}
+                        ${safeLocation ? `<p class="user-profile-location">location: ${safeLocation}</p>` : ''}
+                        ${stats.length ? `<div class="user-profile-stats">${stats.join('')}</div>` : ''}
+                        ${safeUsername ? `<a class="user-profile-link" href="/${p.provider === 'gitlab' ? 'gl' : p.provider === 'codeberg' ? 'cb' : 'gh'}/${encodeURIComponent(p.username || '')}">open profile in gitGost</a>` : ''}
+                    </div>
+                `;
+            }
+
             function switchTab(tab, el) {
                 document
                     .querySelectorAll(".content-tab")
@@ -3285,6 +3602,8 @@ <h3 style="margin-top: 0; color: var(--accent)">
                     loadStars();
                 } else if (tab === "popular") {
                     loadPopular();
+                } else if (tab === "users") {
+                    loadUsersTab();
                 }
             }
 
@@ -3322,14 +3641,16 @@ <h3 style="margin-top: 0; color: var(--accent)">
                     else if (provider === 'cb') { starBadgeColor = '#2185D0'; starBadgeBorder = '#2185D0'; starBadgeLabel = codebergBadgeIcon(); }
                     else { starBadgeColor = '#181717'; starBadgeBorder = '#181717'; starBadgeLabel = githubBadgeIcon(); }
                     const starCount = repo.stars > 0 ? repo.stars : 0;
+                    const starCountLabel = repo.stars > 0 ? `(${STAR_ICON_HTML}${formatNumber(repo.stars)})` : '';
                     const cardRepo = { description: repo.description, stars: starCount, language: repo.language };
                     item.innerHTML = `
                         <div class="repo-item-normal">
                             <div class="repo-item-left">
-                                <div class="repo-item-name">${forgeIcon}<span class="owner">${ownerHtml}</span><span class="slash">/</span><span class="name">${repoHtml}</span></div>
+                                <div class="repo-item-name">${forgeIcon}<a class="owner" href="/${provider}/${encodeURIComponent(repo.owner || '')}" onclick="event.stopPropagation();">${ownerHtml}</a><span class="slash">/</span><span class="name">${repoHtml}</span></div>
                                 ${ago ? `<div class="repo-item-desc" style="font-size:0.7rem;">starred ${ago}</div>` : ''}
                             </div>
                             <div style="display:flex;align-items:center;gap:0.5rem;flex-shrink:0;">
+                                ${starCountLabel ? `<span class="repo-count">${starCountLabel}</span>` : ''}
                                 ${langBadge}
                                 <span style="font-family:'IBM Plex Mono',monospace;font-size:0.68rem;color:${starBadgeColor};border:1px solid ${starBadgeBorder};border-radius:3px;padding:0.1em 0.35em;display:inline-flex;align-items:center;">${starBadgeLabel}</span>
                             </div>
@@ -4524,6 +4845,9 @@ <h2 style="font-size:1rem;font-weight:600;margin:0 0 1.25rem;color:var(--fg);">$
                     if (!append && listEl) listEl.innerHTML = '<p style="color:var(--fg-secondary);font-size:0.78rem;">Error loading repositories.</p>';
                 } finally {
                     window.tagState.loading = false;
+                    // Carga terminada: ocultar el indicador "searching repositories…"
+                    const countEl = document.getElementById('tag-repo-count');
+                    if (countEl) countEl.style.display = 'none';
                 }
             }
 
@@ -4545,7 +4869,7 @@ <h2 style="font-size:1rem;font-weight:600;margin:0 0 1.25rem;color:var(--fg);">$
                         if (owner && name) window.location.href = `/repo.html?owner=${encodeURIComponent(owner)}&repo=${encodeURIComponent(name)}&provider=${provider}`;
                     };
                     const desc = repo.description ? escapeHtml(repo.description.slice(0, 120)) : '';
-                    const stars = repo.stars > 0 ? `(${formatNumber(repo.stars)})` : '';
+                    const stars = repo.stars > 0 ? `(${STAR_ICON_HTML}${formatNumber(repo.stars)})` : '';
                     					const langBadge = languageBadgeHtml(repo.language);
                     					const ownerHtml = escapeHtml(owner || '');
                     					const nameHtml = escapeHtml(name || '');
@@ -4558,7 +4882,7 @@ <h2 style="font-size:1rem;font-weight:600;margin:0 0 1.25rem;color:var(--fg);">$
                         						<div class="repo-item-normal">
                         							<div class="repo-item-left">
                         								<div class="repo-item-name">
-                        									${forgeIcon}<span class="owner">${ownerHtml}</span><span class="slash">/</span><span class="name">${nameHtml}</span>
+                                ${forgeIcon}<a class="owner" href="/${provider}/${encodeURIComponent(owner)}" onclick="event.stopPropagation();">${ownerHtml}</a><span class="slash">/</span><span class="name">${nameHtml}</span>
                         								</div>
                         								${desc ? `<div class="repo-item-desc">${desc}</div>` : ''}
                         							</div>
@@ -4737,23 +5061,32 @@ <h2 style="font-size:1rem;font-weight:600;margin:0 0 1.25rem;color:var(--fg);">$
         }
 
         async function updateRateLimit() {
-            try {
-                const token = localStorage.getItem('gh_token');
-                const headers = token ? { 'Authorization': `token ${token}` } : {};
-                const res = await fetch('https://api.github.com/rate_limit', { headers });
-                if (res.ok) {
-                    const core = (await res.json()).rate;
-                    const pct  = core.limit > 0 ? Math.round((core.remaining / core.limit) * 100) : 0;
-                    document.getElementById('rl-remaining').textContent = core.remaining.toLocaleString() + ' remaining';
-                    document.getElementById('rl-limit').textContent = '/ ' + core.limit.toLocaleString();
-                    updateRateLimitRing('rl-bar', pct, rlColor(pct));
-                    document.getElementById('rl-reset').textContent = rlResetText(core.reset);
-                    const st = document.getElementById('rl-status');
-                    st.textContent = token ? 'authenticated' : '';
-                    st.style.color = '#1a7f37';
-                }
-            } catch {}
-
+            const token = localStorage.getItem('gh_token');
+            if (token) {
+                try {
+                    const res = await fetch('https://api.github.com/rate_limit', { headers: { 'Authorization': `token ${token}` } });
+                    if (res.ok) {
+                        const core = (await res.json()).rate;
+                        const pct  = core.limit > 0 ? Math.round((core.remaining / core.limit) * 100) : 0;
+                        document.getElementById('rl-remaining').textContent = core.remaining.toLocaleString() + ' remaining';
+                        document.getElementById('rl-limit').textContent = '/ ' + core.limit.toLocaleString();
+                        updateRateLimitRing('rl-bar', pct, rlColor(pct));
+                        document.getElementById('rl-reset').textContent = rlResetText(core.reset);
+                        const st = document.getElementById('rl-status');
+                        st.textContent = 'authenticated';
+                        st.style.color = '#1a7f37';
+                    }
+                } catch {}
+            } else {
+                // Sin token: mostrar el límite no autenticado sin llamar a la API (evita el 403 de GitHub).
+                document.getElementById('rl-remaining').textContent = '60 / hour';
+                document.getElementById('rl-limit').textContent = '';
+                updateRateLimitRing('rl-bar', 100, 'var(--accent)');
+                document.getElementById('rl-reset').textContent = 'resets every hour';
+                const st = document.getElementById('rl-status');
+                st.textContent = '';
+                st.style.color = '#1a7f37';
+            }
             {
                 const glToken = localStorage.getItem('gl_token');
                 const limit = glToken ? 2000 : 300;
@@ -4945,8 +5278,9 @@ <h2 style="font-size:1rem;font-weight:600;margin:0 0 1.25rem;color:var(--fg);">$
                     </g>
                     <g transform="translate(24, 125)" fill="var(--fg-muted)" font-family="IBM Plex Mono, monospace" font-size="14">
                         <g>
-                            <svg x="0" y="-8" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="var(--fg-muted)" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-                                <polygon points="12 2 15.09 8.26 22 9.27 17 14.14 18.18 21.02 12 17.77 5.82 21.02 7 14.14 2 9.27 8.91 8.26 12 2"/>
+                            <svg x="0" y="-8" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="var(--fg-muted)" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" xmlns="http://www.w3.org/2000/svg">
+                                <path d="M0 0h24v24H0z" fill="none" stroke="none"/>
+                                <path d="M10.704 4.325a1.5 1.5 0 0 1 2.592 0l1.818 3.12a1.5 1.5 0 0 0 .978.712l3.53.764a1.5 1.5 0 0 1 .8 2.465l-2.405 2.693a1.5 1.5 0 0 0-.374 1.15l.363 3.593a1.5 1.5 0 0 1-2.097 1.524l-3.304-1.456a1.5 1.5 0 0 0-1.21 0l-3.304 1.456a1.5 1.5 0 0 1-2.097-1.524l.363-3.593a1.5 1.5 0 0 0-.373-1.15l-2.406-2.693a1.5 1.5 0 0 1 .8-2.465l3.53-.764a1.5 1.5 0 0 0 .979-.711z"/>
                             </svg>
                             <text x="20" y="0" dominant-baseline="middle">${starText}</text>
                         </g>
diff --git a/web/profile.html b/web/profile.html
new file mode 100644
index 0000000..192972e
--- /dev/null
+++ b/web/profile.html
@@ -0,0 +1,1436 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>gitGost - profile</title>
+    <script src="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/11.10.0/highlight.min.js" integrity="sha384-GdEWAbCjn+ghjX0gLx7/N1hyTVmPAjdC2OvoAA0RyNcAOhqwtT8qnbCxWle2+uJX" crossorigin="anonymous"></script>
+    <script>if (typeof hljs !== 'undefined') hljs.configure({ ignoreUnescapedHTML: true });</script>
+    <script src="https://cdn.jsdelivr.net/npm/marked@4/marked.min.js" integrity="sha384-QsSpx6a0USazT7nK7w8qXDgpSAPhFsb2XtpoLFQ5+X2yFN6hvCKnwEzN8M5FWaJb" crossorigin="anonymous"></script>
+    <script src="https://cdn.jsdelivr.net/npm/dompurify@3/dist/purify.min.js" integrity="sha384-ZuC+DIACqSIZTsp+7YF57cR5Y+6qXa7YFbEKdA/EHA/R0T+41dtorqucYl71Zp+t" crossorigin="anonymous"></script>
+    <style>
+        :root {
+            --bg: #ffffff;
+            --fg: #1a1f2e;
+            --fg-muted: #6b7280;
+            --fg-secondary: #9ca3af;
+            --bg-secondary: #f5f5f5;
+            --bg-hover: #ebebeb;
+            --accent: #d16014;
+            --hm-1: #9be9a8;
+            --hm-2: #40c463;
+            --hm-3: #30a14e;
+            --hm-4: #216e39;
+            --border: #e0e0e0;
+            --card: #f9f9f9;
+            --code-bg: #f4f4f4;
+            --alert-note: #0969da;
+            --alert-tip: #1a7f37;
+            --alert-important: #8250df;
+            --alert-warning: #9a6700;
+            --alert-caution: #cf222e;
+        }
+        :root[data-theme="dark"] {
+            --bg: #000000;
+            --fg: #d4d4d4;
+            --fg-muted: #9ca3af;
+            --fg-secondary: #6b7280;
+            --bg-secondary: #0d0d0d;
+            --bg-hover: #1a1a1a;
+            --accent: #ffa657;
+            --hm-1: #0e4429;
+            --hm-2: #006d32;
+            --hm-3: #26a641;
+            --hm-4: #39d353;
+            --border: #222222;
+            --card: #0d0d0d;
+            --code-bg: #111111;
+            --alert-note: #4493f8;
+            --alert-tip: #3fb950;
+            --alert-important: #ab7df8;
+            --alert-warning: #d29922;
+            --alert-caution: #ff7b72;
+        }
+        @media (prefers-color-scheme: dark) {
+            :root:not([data-theme]) {
+                --bg: #000000; --fg: #d4d4d4; --fg-muted: #9ca3af;
+                --fg-secondary: #6b7280; --bg-secondary: #0d0d0d;
+                --bg-hover: #1a1a1a; --accent: #ffa657;
+                --hm-1: #0e4429; --hm-2: #006d32; --hm-3: #26a641; --hm-4: #39d353;
+                --border: #222222; --card: #0d0d0d; --code-bg: #111111;
+                --alert-note: #4493f8; --alert-tip: #3fb950; --alert-important: #ab7df8;
+                --alert-warning: #d29922; --alert-caution: #ff7b72;
+            }
+        }
+        *, *::before, *::after { box-sizing: border-box; }
+        body {
+            margin: 0;
+            background: var(--bg);
+            color: var(--fg);
+            font-family: "IBM Plex Sans", system-ui, sans-serif;
+            font-size: 0.9rem;
+            min-height: 100vh;
+            min-height: 100dvh;
+            display: flex;
+            flex-direction: column;
+        }
+
+        .statusbar {
+            position: sticky;
+            top: 0;
+            z-index: 100;
+            background: var(--bg);
+            border-bottom: 1px solid var(--border);
+            padding: 0.5rem 1.5rem;
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.75rem;
+        }
+        .statusbar-left { display: flex; align-items: center; gap: 0.5rem; }
+        .statusbar-right { display: flex; align-items: center; gap: 0.5rem; }
+        .statusbar a { color: var(--accent); text-decoration: none; }
+        .statusbar a:hover { text-decoration: underline; }
+        .statusbar .crumb { color: var(--fg-muted); }
+        .statusbar .crumb.provider { color: var(--accent); }
+        .statusbar .current { color: var(--fg); }
+
+        .profile-layout {
+            display: flex;
+            flex: 1;
+            min-height: 0;
+            width: 100%;
+        }
+
+        .left-nav {
+            width: 200px;
+            border-right: 1px solid var(--border);
+            overflow-y: auto;
+            overflow-x: hidden;
+            flex-shrink: 0;
+            background: var(--bg);
+            padding: 0.4rem 0;
+        }
+        .left-nav a {
+            display: flex;
+            align-items: center;
+            gap: 0.55rem;
+            padding: 0.45rem 1rem;
+            color: var(--fg-muted);
+            text-decoration: none;
+            font-size: 0.8rem;
+            font-family: 'IBM Plex Mono', monospace;
+            white-space: nowrap;
+        }
+        .left-nav a:hover { background: var(--bg-hover); color: var(--fg); }
+        .left-nav a.active { background: var(--bg-hover); color: var(--fg); font-weight: 600; }
+        .left-nav a .count { margin-left: auto; color: var(--fg-secondary); font-size: 0.68rem; }
+
+        .main-content {
+            flex: 1;
+            min-width: 0;
+            padding: 1.5rem 2rem;
+            max-width: 860px;
+        }
+
+        .right-sidebar {
+            width: 300px;
+            border-left: 1px solid var(--border);
+            padding: 1.25rem 1.25rem;
+            overflow-y: auto;
+            flex-shrink: 0;
+            background: var(--bg);
+        }
+
+        .section-title {
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.7rem;
+            letter-spacing: 0.06em;
+            text-transform: uppercase;
+            color: var(--fg-muted);
+            margin: 1.6rem 0 0.6rem;
+        }
+        .section-title:first-child { margin-top: 0; }
+
+        .profile-header {
+            display: flex;
+            align-items: center;
+            gap: 1rem;
+            padding-bottom: 1.25rem;
+            border-bottom: 1px solid var(--border);
+            margin-bottom: 1.25rem;
+        }
+        .profile-header .avatar {
+            width: 64px;
+            height: 64px;
+            border-radius: 6px;
+            background: var(--bg-secondary);
+            border: 1px solid var(--border);
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-weight: 700;
+            font-size: 1.5rem;
+            color: var(--fg-muted);
+            flex-shrink: 0;
+            overflow: hidden;
+        }
+        .profile-header .avatar img { width: 100%; height: 100%; object-fit: cover; }
+        .profile-header .id .fullname { font-weight: 700; font-size: 1.1rem; }
+        .profile-header .id .username { color: var(--fg-muted); font-family: 'IBM Plex Mono', monospace; font-size: 0.78rem; }
+        .profile-header .id .badges { display: flex; align-items: center; gap: 0.4rem; margin-top: 0.35rem; }
+
+        .provider-badge {
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.65rem;
+            border: 1px solid;
+            border-radius: 3px;
+            padding: 0.1em 0.4em;
+            opacity: 0.85;
+            display: inline-flex;
+            align-items: center;
+            gap: 0.25em;
+        }
+        .provider-badge svg { display: block; }
+
+        .type-badge {
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.65rem;
+            border: 1px solid var(--border);
+            border-radius: 3px;
+            padding: 0.1em 0.4em;
+            color: var(--fg-muted);
+            display: inline-flex;
+            align-items: center;
+        }
+
+        .readme-box {
+            border: 1px solid var(--border);
+            border-radius: 4px;
+            margin-bottom: 1.5rem;
+        }
+        .readme-header {
+            padding: 0.5rem 1rem;
+            border-bottom: 1px solid var(--border);
+            background: var(--bg-secondary);
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.68rem;
+            color: var(--fg-muted);
+        }
+        .readme-content { padding: 1.25rem 1.5rem; }
+
+        .readme h1, .readme h2, .readme h3, .readme h4, .readme h5, .readme h6 {
+            margin: 1.2em 0 0.5em;
+            line-height: 1.3;
+            font-weight: 700;
+            color: var(--fg);
+        }
+        .readme h1 { font-size: 1.5em; border-bottom: 1px solid var(--border); padding-bottom: 0.3em; }
+        .readme h2 { font-size: 1.25em; border-bottom: 1px solid var(--border); padding-bottom: 0.3em; }
+        .readme h3 { font-size: 1.1em; }
+        .readme h4 { font-size: 1em; }
+        .readme p { margin: 0.75em 0; line-height: 1.6; }
+        .readme code {
+            background: var(--code-bg);
+            border-radius: 3px;
+            padding: 0.15em 0.35em;
+            font-family: "IBM Plex Mono", monospace;
+            font-size: 0.82em;
+        }
+        .readme pre {
+            background: var(--code-bg);
+            border: 1px solid var(--border);
+            border-radius: 4px;
+            padding: 0.75rem 1rem;
+            overflow-x: auto;
+            margin: 1em 0;
+            font-family: "IBM Plex Mono", monospace;
+            font-size: 0.78rem;
+            line-height: 1.5;
+        }
+        .readme pre code { background: transparent; padding: 0; font-size: 1em; }
+        .readme a { color: var(--accent); }
+        .readme a:hover { text-decoration: underline; }
+        .readme blockquote {
+            margin: 1em 0;
+            padding: 0.1em 1em;
+            border-left: 0.25em solid var(--border);
+            color: var(--fg-muted);
+        }
+        .readme ul, .readme ol { margin: 0.75em 0; padding-left: 1.5em; }
+        .readme li { margin: 0.25em 0; }
+        .readme img { max-width: 100%; vertical-align: middle; border-radius: 4px; }
+        .readme table { border-collapse: collapse; margin: 1em 0; display: block; overflow-x: auto; }
+        .readme th, .readme td { border: 1px solid var(--border); padding: 0.4em 0.8em; }
+        .readme th { background: var(--bg-secondary); }
+        .readme tr:nth-child(even) { background: var(--bg-secondary); }
+        .readme hr { border: none; border-top: 1px solid var(--border); margin: 1.5em 0; }
+
+        .markdown-alert {
+            padding: 0.5rem 1rem;
+            margin: 1rem 0;
+            border: 1px solid var(--border);
+            border-left-width: 0.25em;
+            border-radius: 4px;
+        }
+        .markdown-alert > :first-child { margin-top: 0; }
+        .markdown-alert > :last-child { margin-bottom: 0; }
+        .markdown-alert-title {
+            display: flex;
+            align-items: center;
+            gap: 0.4rem;
+            font-weight: 600;
+            margin: 0 0 0.25rem;
+        }
+        .markdown-alert-title .octicon { margin-right: 0.5rem; flex-shrink: 0; fill: currentColor; }
+        .markdown-alert-note      { border-left-color: var(--alert-note); }
+        .markdown-alert-important { border-left-color: var(--alert-important); }
+        .markdown-alert-warning   { border-left-color: var(--alert-warning); }
+        .markdown-alert-tip       { border-left-color: var(--alert-tip); }
+        .markdown-alert-caution   { border-left-color: var(--alert-caution); }
+
+        .repo-list { display: flex; flex-direction: column; gap: 0.6rem; }
+        .repo-card {
+            border: 1px solid var(--border);
+            border-radius: 4px;
+            padding: 0.7rem 1rem;
+            background: var(--bg);
+        }
+        .repo-card:hover { background: var(--bg-secondary); }
+        .repo-card-head { display: flex; justify-content: space-between; align-items: center; gap: 0.5rem; }
+        .repo-name {
+            color: var(--accent);
+            font-weight: 600;
+            font-size: 0.85rem;
+            text-decoration: none;
+            font-family: 'IBM Plex Mono', monospace;
+        }
+        .repo-name:hover { text-decoration: underline; }
+        .repo-visibility {
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.62rem;
+            color: var(--fg-muted);
+            border: 1px solid var(--border);
+            border-radius: 3px;
+            padding: 0.08em 0.45em;
+            flex-shrink: 0;
+        }
+        .repo-desc {
+            color: var(--fg-muted);
+            margin: 0.4rem 0;
+            font-size: 0.75rem;
+            line-height: 1.5;
+        }
+        .repo-meta {
+            display: flex;
+            gap: 0.9rem;
+            color: var(--fg-secondary);
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.68rem;
+            flex-wrap: wrap;
+        }
+        .repo-meta .lang { display: inline-flex; align-items: center; gap: 0.3rem; }
+        .lang-dot { width: 0.6em; height: 0.6em; border-radius: 50%; display: inline-block; }
+        .repo-empty {
+            color: var(--fg-secondary);
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.75rem;
+            padding: 1rem 0;
+        }
+        .stars-back {
+            color: var(--accent);
+            text-decoration: none;
+        }
+        .stars-back:hover { text-decoration: underline; }
+        .stars-count { color: var(--fg-secondary); font-weight: 400; }
+        /* Oculta secciones de main al alternar vistas (SPA); gana a display inline y a .repo-list */
+        .view-hidden { display: none !important; }
+
+        .person-card { display: flex; align-items: center; gap: 0.8rem; }
+        .person-avatar {
+            width: 2.3rem;
+            height: 2.3rem;
+            border-radius: 50%;
+            background: var(--bg-secondary);
+            border: 1px solid var(--border);
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-weight: 700;
+            font-size: 0.85rem;
+            color: var(--fg-muted);
+            overflow: hidden;
+            flex-shrink: 0;
+            text-decoration: none;
+        }
+        .person-avatar img { width: 100%; height: 100%; object-fit: cover; }
+        .person-info { min-width: 0; }
+        .person-name { color: var(--fg-muted); font-size: 0.72rem; margin-top: 0.1rem; }
+        .profile-error {
+            color: var(--fg-secondary);
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.8rem;
+            padding: 2rem;
+        }
+
+        .sb-about .sb-avatar {
+            width: 56px;
+            height: 56px;
+            border-radius: 6px;
+            background: var(--bg-secondary);
+            border: 1px solid var(--border);
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-weight: 700;
+            font-size: 1.25rem;
+            color: var(--fg-muted);
+            overflow: hidden;
+            flex-shrink: 0;
+        }
+        .sb-about .sb-avatar img { width: 100%; height: 100%; object-fit: cover; }
+        .sb-about .sb-head { display: flex; align-items: center; gap: 0.8rem; margin-bottom: 0.8rem; }
+        .sb-about .sb-name { font-weight: 700; font-size: 0.95rem; }
+        .sb-about .sb-user { color: var(--fg-muted); font-family: 'IBM Plex Mono', monospace; font-size: 0.72rem; }
+        .sb-about .sb-bio { color: var(--fg-muted); font-size: 0.78rem; line-height: 1.5; margin: 0 0 0.8rem; }
+
+        .stats-grid {
+            display: flex;
+            gap: 0.9rem;
+            margin: 0.8rem 0;
+        }
+        .stat { display: flex; flex-direction: column; }
+        .stat .v { font-family: 'IBM Plex Mono', monospace; font-size: 0.9rem; font-weight: 600; }
+        .stat .l { color: var(--fg-secondary); font-size: 0.65rem; }
+        .stat-link { cursor: pointer; }
+        .stat-link:hover .v { color: var(--accent); text-decoration: underline; }
+
+        .sb-btn {
+            display: block;
+            width: 100%;
+            text-align: center;
+            padding: 0.4rem 0.5rem;
+            border: 1px solid var(--border);
+            border-radius: 3px;
+            background: transparent;
+            color: var(--fg);
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.72rem;
+            text-decoration: none;
+            cursor: pointer;
+            transition: all 0.15s;
+            margin-bottom: 0.5rem;
+        }
+        .sb-btn:hover { background: var(--bg-hover); border-color: var(--fg-secondary); }
+
+        .meta-list {
+            list-style: none;
+            margin: 0.9rem 0 0;
+            padding: 0.9rem 0 0;
+            border-top: 1px solid var(--border);
+            color: var(--fg-muted);
+            font-family: 'IBM Plex Mono', monospace;
+            font-size: 0.7rem;
+            display: flex;
+            flex-direction: column;
+            gap: 0.4rem;
+        }
+        .meta-list li { display: flex; justify-content: space-between; gap: 0.6rem; }
+        .meta-list .k { color: var(--fg-secondary); }
+        .meta-list .v { color: var(--fg-muted); text-align: right; }
+        .meta-list a { color: var(--accent); text-decoration: none; }
+        .meta-list a:hover { text-decoration: underline; }
+
+        .sb-contrib {
+            margin-top: 0.9rem;
+            padding-top: 0.9rem;
+            border-top: 1px solid var(--border);
+            font-family: 'IBM Plex Mono', monospace;
+        }
+        .sb-contrib .hm-head {
+            display: flex;
+            align-items: baseline;
+            justify-content: space-between;
+            gap: 0.5rem;
+            margin-bottom: 0.7rem;
+        }
+        .sb-contrib .hm-title {
+            font-size: 0.7rem;
+            letter-spacing: 0.06em;
+            text-transform: uppercase;
+            color: var(--fg-muted);
+        }
+        .sb-contrib .hm-total {
+            font-size: 0.68rem;
+            color: var(--fg-secondary);
+        }
+        .sb-contrib .hm-summary {
+            margin-bottom: 0.7rem;
+            font-size: 0.68rem;
+            color: var(--fg-muted);
+            line-height: 1.5;
+        }
+        .sb-contrib .hm-empty {
+            padding: 0.3rem 0 0.2rem;
+            font-size: 0.72rem;
+            color: var(--fg-secondary);
+        }
+        .hm-months {
+            display: grid;
+            grid-template-columns: repeat(auto-fill, minmax(76px, 1fr));
+            gap: 0.7rem;
+        }
+        .hm-month { display: flex; flex-direction: column; gap: 0.25rem; }
+        .hm-month-label {
+            font-size: 0.58rem;
+            color: var(--fg-secondary);
+            text-transform: uppercase;
+        }
+        .hm-days {
+            display: grid;
+            grid-template-columns: repeat(7, 1fr);
+            gap: 2px;
+        }
+        .hm-cell {
+            aspect-ratio: 1;
+            border-radius: 1px;
+            background: var(--bg-hover);
+        }
+        .hm-cell.hm-blank { background: transparent; }
+        .hm-cell.lvl1 { background: var(--hm-1); }
+        .hm-cell.lvl2 { background: var(--hm-2); }
+        .hm-cell.lvl3 { background: var(--hm-3); }
+        .hm-cell.lvl4 { background: var(--hm-4); }
+        .hm-legend {
+            display: flex;
+            align-items: center;
+            justify-content: flex-end;
+            gap: 0.3rem;
+            margin-top: 0.7rem;
+            font-size: 0.58rem;
+            color: var(--fg-secondary);
+        }
+        .hm-legend .hm-cell { width: 0.7rem; height: 0.7rem; }
+
+        .suspension-banner {
+            display: none;
+            background: #fff3cd;
+            border: 1px solid #ffc107;
+            border-radius: 4px;
+            padding: 0.75rem 1rem;
+            margin-bottom: 1rem;
+            font-family: "IBM Plex Mono", monospace;
+            font-size: 0.78rem;
+            color: #856404;
+            align-items: center;
+            gap: 0.75rem;
+        }
+        :root[data-theme="dark"] .suspension-banner {
+            background: #663d03;
+            border-color: #ffa657;
+            color: #ffe6a7;
+        }
+        @media (prefers-color-scheme: dark) {
+            :root:not([data-theme]) .suspension-banner {
+                background: #663d03;
+                border-color: #ffa657;
+                color: #ffe6a7;
+            }
+        }
+        .suspension-banner.active { display: flex; }
+
+        @media (max-width: 900px) {
+            .left-nav { display: none; }
+            .right-sidebar { display: none; }
+            .main-content { padding: 1rem; }
+        }
+    </style>
+</head>
+<body>
+    <div id="suspension-banner" class="suspension-banner">
+        <div class="suspension-banner-icon">⚠️</div>
+        <div class="suspension-banner-content">
+            <strong>Service Temporarily Suspended</strong>
+            The service is temporarily suspended due to detected bot activity. Push operations are currently disabled.
+        </div>
+    </div>
+
+    <div class="statusbar">
+        <div class="statusbar-left">
+            <a href="/" style="color:var(--accent);text-decoration:none;font-family:'IBM Plex Mono',monospace;font-weight:700;font-size:0.78rem;">gitGost</a>
+            <span style="color:var(--fg-muted);">›</span>
+            <span class="crumb provider" id="sb-provider">—</span>
+            <span style="color:var(--fg-muted);">›</span>
+            <span class="current" id="sb-username">—</span>
+        </div>
+        <div class="statusbar-right">
+            <span style="color:var(--fg-muted);">browsing as goster</span>
+        </div>
+    </div>
+
+    <div class="profile-layout">
+        <nav class="left-nav">
+            <a href="#" class="active" onclick="navOverview(); return false;">
+                <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
+                    <path d="M0 0h24v24H0z" fill="none" />
+                    <path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M2.75 7.21a2 2 0 0 1 2-2H8.5a3.5 3.5 0 0 1 3.5 3.5v10.885l-1.015-.721a4 4 0 0 0-2.318-.74H4.75a2 2 0 0 1-2-2zm18.5 0a2 2 0 0 0-2-2H15.5a3.5 3.5 0 0 0-3.5 3.5v10.885l1.015-.721a4 4 0 0 1 2.317-.74h3.918a2 2 0 0 0 2-2z" />
+                </svg>
+                overview
+            </a>
+            <a href="#" onclick="navRepos(); return false;">
+                <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
+                    <path d="M0 0h24v24H0z" fill="none" />
+                    <path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M3 6.75A2.25 2.25 0 0 1 5.25 4.5h4.397c.49 0 .961.19 1.31.53l.626.627a2.25 2.25 0 0 0 1.59.659h5.578A2.25 2.25 0 0 1 21 8.566v8.684A2.25 2.25 0 0 1 18.75 19.5H5.25A2.25 2.25 0 0 1 3 17.25z" />
+                </svg>
+                repositories
+                <span class="count" id="nav-repo-count"></span>
+            </a>
+            <a href="#" onclick="openStars(); return false;">
+                <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
+                    <path d="M0 0h24v24H0z" fill="none" />
+                    <path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M10.704 4.325a1.5 1.5 0 0 1 2.592 0l1.818 3.12a1.5 1.5 0 0 0 .978.712l3.53.764a1.5 1.5 0 0 1 .8 2.465l-2.405 2.693a1.5 1.5 0 0 0-.374 1.15l.363 3.593a1.5 1.5 0 0 1-2.097 1.524l-3.304-1.456a1.5 1.5 0 0 0-1.21 0l-3.304 1.456a1.5 1.5 0 0 1-2.097-1.524l.363-3.593a1.5 1.5 0 0 0-.373-1.15l-2.406-2.693a1.5 1.5 0 0 1 .8-2.465l3.53-.764a1.5 1.5 0 0 0 .979-.711z" />
+                </svg>
+                stars
+                <span class="count" id="nav-star-count"></span>
+            </a>
+        </nav>
+
+        <main class="main-content" id="main-content">
+            <div class="profile-header" id="profile-header"></div>
+            <div class="section-title" id="profile-section-title"></div>
+
+            <div id="readme-section"></div>
+
+            <div class="section-title" id="repos-section-title">repositories</div>
+            <div id="repos-section" class="repo-list"></div>
+
+            <div class="section-title view-hidden" id="starred-section-title"></div>
+            <div id="starred-section" class="repo-list view-hidden"></div>
+
+            <div class="section-title view-hidden" id="people-section-title"></div>
+            <div id="people-section" class="repo-list view-hidden"></div>
+        </main>
+
+        <aside class="right-sidebar">
+            <div class="section-title">about</div>
+            <div class="sb-about" id="sb-about"></div>
+            <div id="sb-contributions"></div>
+        </aside>
+    </div>
+
+    <script>
+        function getApiBase() {
+            if (
+                typeof window.Capacitor !== 'undefined' &&
+                window.Capacitor.isNativePlatform &&
+                window.Capacitor.isNativePlatform()
+            ) {
+                return 'https://gitgost.livrasand.com';
+            }
+            return window.location.origin;
+        }
+        const API_BASE = getApiBase();
+
+        // Ruta limpia: /gh|gl|cb/{username}
+        const _pathParts = window.location.pathname.split('/').filter(Boolean);
+        const PROVIDER = (_pathParts[0] === 'gl' || _pathParts[0] === 'cb') ? _pathParts[0] : 'gh';
+        let USERNAME = '';
+        try {
+            USERNAME = decodeURIComponent(_pathParts[1] || '');
+        } catch (_) {
+            USERNAME = _pathParts[1] || '';
+        }
+
+        const STAR_ICON_HTML = `<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24" style="vertical-align:-0.125em;"><path d="M0 0h24v24H0z" fill="none"/><path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M10.704 4.325a1.5 1.5 0 0 1 2.592 0l1.818 3.12a1.5 1.5 0 0 0 .978.712l3.53.764a1.5 1.5 0 0 1 .8 2.465l-2.405 2.693a1.5 1.5 0 0 0-.374 1.15l.363 3.593a1.5 1.5 0 0 1-2.097 1.524l-3.304-1.456a1.5 1.5 0 0 0-1.21 0l-3.304 1.456a1.5 1.5 0 0 1-2.097-1.524l.363-3.593a1.5 1.5 0 0 0-.373-1.15l-2.406-2.693a1.5 1.5 0 0 1 .8-2.465l3.53-.764a1.5 1.5 0 0 0 .979-.711z"/></svg>`;
+
+        function escHtml(s) {
+            return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+        }
+        function escAttr(s) {
+            return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+        }
+
+        function sanitizeUrl(url) {
+            if (!url) return '';
+            try {
+                const parsed = new URL(url, window.location.href);
+                if (parsed.protocol === 'http:' || parsed.protocol === 'https:') {
+                    return url;
+                }
+            } catch (_) {}
+            return '';
+        }
+
+        function formatNumber(num) {
+            if (num >= 1000000) return (num / 1000000).toFixed(1) + "M";
+            if (num >= 1000) return (num / 1000).toFixed(1) + "k";
+            return String(num);
+        }
+
+        function timeAgo(dateStr) {
+            if (!dateStr) return '';
+            const diff = Date.now() - new Date(dateStr).getTime();
+            if (isNaN(diff) || diff < 0) return '';
+            const mins = Math.floor(diff / 60000);
+            const hours = Math.floor(diff / 3600000);
+            const days = Math.floor(diff / 86400000);
+            const weeks = Math.floor(days / 7);
+            const months = Math.floor(days / 30);
+            if (mins < 60) return mins <= 1 ? 'just now' : `${mins}m ago`;
+            if (hours < 24) return `${hours}h ago`;
+            if (days < 7) return `${days}d ago`;
+            if (weeks < 5) return `${weeks}w ago`;
+            if (months < 12) return `${months}mo ago`;
+            return `${Math.floor(months / 12)}y ago`;
+        }
+
+        const _LANG_COLORS = {
+            'JavaScript': '#f1e05a', 'TypeScript': '#3178c6', 'Go': '#00ADD8', 'Rust': '#dea584',
+            'Python': '#3572A5', 'C': '#555555', 'C++': '#f34b7d', 'Java': '#b07219', 'Ruby': '#701516',
+            'Shell': '#89e051', 'HTML': '#e34c26', 'CSS': '#563d7c', 'PHP': '#4F5D95', 'C#': '#178600',
+            'Swift': '#F05138', 'Kotlin': '#A97BFF', 'Vue': '#41b883', 'Svelte': '#ff3e00',
+            'Markdown': '#083fa1', 'Dockerfile': '#384d54', 'Makefile': '#427819', 'Zig': '#ec915c',
+            'Elixir': '#6e4a7e', 'Haskell': '#5e5086', 'Lua': '#000080', 'R': '#198CE7',
+            'Scala': '#c22d40', 'Dart': '#00B4AB', 'Nix': '#7e7eff', 'Perl': '#0298c3',
+            'Objective-C': '#438eff', 'Assembly': '#6E4C13', 'Vim script': '#199f4b', 'Jupyter Notebook': '#DA5B0B'
+        };
+        function langColor(lang) {
+            return _LANG_COLORS[lang] || 'var(--fg-secondary)';
+        }
+
+        function githubBadgeIcon() {
+            return `<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" style="display:block;fill:#181717;"><title>GitHub</title><path d="M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12"/></svg>`;
+        }
+        function gitlabBadgeIcon() {
+            return `<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" style="display:block;fill:#FC6D26;"><title>GitLab</title><path d="m23.6004 9.5927-.0337-.0862L20.3.9814a.851.851 0 0 0-.3362-.405.8748.8748 0 0 0-.9997.0539.8748.8748 0 0 0-.29.4399l-2.2055 6.748H7.5375l-2.2057-6.748a.8573.8573 0 0 0-.29-.4412.8748.8748 0 0 0-.9997-.0537.8585.8585 0 0 0-.3362.4049L.4332 9.5015l-.0325.0862a6.0657 6.0657 0 0 0 2.0119 7.0105l.0113.0087.03.0213 4.976 3.7264 2.462 1.8633 1.4995 1.1321a1.0085 1.0085 0 0 0 1.2197 0l1.4995-1.1321 2.4619-1.8633 5.006-3.7489.0125-.01a6.0682 6.0682 0 0 0 2.0094-7.003z"/></svg>`;
+        }
+        function codebergBadgeIcon() {
+            return `<svg role="img" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" style="display:block;fill:#2185D0;"><title>Codeberg</title><path d="M11.955.49A12 12 0 0 0 0 12.49a12 12 0 0 0 1.832 6.373L11.838 5.928a.187.14 0 0 1 .324 0l10.006 12.935A12 12 0 0 0 24 12.49a12 12 0 0 0-12-12 12 12 0 0 0-.045 0zm.375 6.467l4.416 16.553a12 12 0 0 0 5.137-4.213z"/></svg>`;
+        }
+
+        function providerMeta() {
+            if (PROVIDER === 'gl') {
+                return { label: 'gitlab', name: 'gitlab.com', color: '#FC6D26', icon: gitlabBadgeIcon() };
+            }
+            if (PROVIDER === 'cb') {
+                return { label: 'codeberg', name: 'codeberg.org', color: '#2185D0', icon: codebergBadgeIcon() };
+            }
+            return { label: 'github', name: 'github.com', color: '#181717', icon: githubBadgeIcon() };
+        }
+
+        function authHeaders() {
+            const key = PROVIDER === 'gl' ? 'gl_token' : PROVIDER === 'cb' ? 'cb_token' : 'gh_token';
+            const token = localStorage.getItem(key);
+            return token ? { 'Authorization': 'token ' + token } : {};
+        }
+
+        async function apiGet(path) {
+            try {
+                const res = await fetch(`${API_BASE}${path}`, { headers: authHeaders() });
+                if (!res.ok) return null;
+                return await res.json();
+            } catch (_) {
+                return null;
+            }
+        }
+
+        function formatJoined(dateStr) {
+            if (!dateStr) return '';
+            const d = new Date(dateStr);
+            if (isNaN(d.getTime())) return '';
+            return d.toLocaleDateString('en-US', { year: 'numeric', month: 'short', day: 'numeric' });
+        }
+
+        function renderProfile(p) {
+            const meta = providerMeta();
+            const safeUser = escHtml(p.username || USERNAME);
+            const safeName = escHtml(p.name || '');
+            const safeAvatar = escHtml(p.avatar_url || '');
+            const safeBio = escHtml(p.bio || '');
+            const safeLocation = escHtml(p.location || '');
+            const safeUrl = escAttr(sanitizeUrl(p.url || ''));
+            const safeWebsite = escAttr(sanitizeUrl(p.website || ''));
+            const isOrg = p.type === 'org';
+            const typeLabel = isOrg ? 'organization' : 'user';
+            const joined = formatJoined(p.joined_at);
+
+            // En las vistas SPA (stars/followers/following) el título lo gestiona switchView; no pisarlo.
+            if (_currentView === 'overview') document.title = `${p.name || p.username} · gitGost`;
+
+            const header = document.getElementById('profile-header');
+            if (header) {
+                header.innerHTML = `
+                    <div class="avatar">${safeAvatar ? `<img src="${safeAvatar}" alt=""/>` : escHtml((safeName || safeUser).slice(0, 1).toUpperCase())}</div>
+                    <div class="id">
+                        <div class="fullname">${safeName || safeUser}</div>
+                        <div class="username">@${safeUser}</div>
+                        <div class="badges">
+                            <span class="provider-badge" style="color:${meta.color};border-color:${meta.color};">${meta.icon}${meta.label}</span>
+                            <span class="type-badge">${typeLabel}</span>
+                        </div>
+                    </div>
+                `;
+            }
+
+            const titleEl = document.getElementById('profile-section-title');
+            if (titleEl) titleEl.textContent = `${safeUser} / ${isOrg ? 'organization' : 'profile'}`;
+
+            const sbAbout = document.getElementById('sb-about');
+            if (sbAbout) {
+                const stats = [];
+                if (p.followers !== undefined && p.followers !== null) stats.push(`<div class="stat stat-link" onclick="openPeople('followers'); return false;"><span class="v">${formatNumber(p.followers)}</span><span class="l">followers</span></div>`);
+                if (p.following !== undefined && p.following !== null) stats.push(`<div class="stat stat-link" onclick="openPeople('following'); return false;"><span class="v">${formatNumber(p.following)}</span><span class="l">following</span></div>`);
+                if (p.public_repos !== undefined && p.public_repos !== null) stats.push(`<div class="stat"><span class="v">${formatNumber(p.public_repos)}</span><span class="l">public repos</span></div>`);
+                sbAbout.innerHTML = `
+                    <div class="sb-head">
+                        <div class="sb-avatar">${safeAvatar ? `<img src="${safeAvatar}" alt=""/>` : escHtml((safeName || safeUser).slice(0, 1).toUpperCase())}</div>
+                        <div>
+                            <div class="sb-name">${safeName || safeUser}</div>
+                            <div class="sb-user">@${safeUser}</div>
+                        </div>
+                    </div>
+                    ${safeBio ? `<p class="sb-bio">${safeBio}</p>` : ''}
+                    ${stats.length ? `<div class="stats-grid">${stats.join('')}</div>` : ''}
+                    ${safeUrl ? `<a class="sb-btn" href="${safeUrl}" target="_blank" rel="noopener noreferrer">open profile on ${meta.name}</a>` : ''}
+                    <ul class="meta-list">
+                        ${safeLocation ? `<li><span class="k">location</span><span class="v">${safeLocation}</span></li>` : ''}
+                        ${safeWebsite ? `<li><span class="k">website</span><span class="v"><a href="${safeWebsite}" target="_blank" rel="noopener noreferrer">${escHtml(p.website || '')}</a></span></li>` : ''}
+                        ${joined ? `<li><span class="k">joined</span><span class="v">${joined}</span></li>` : ''}
+                    </ul>
+                `;
+            }
+
+            const navCount = document.getElementById('nav-repo-count');
+            if (navCount && p.public_repos !== undefined && p.public_repos !== null) {
+                navCount.textContent = formatNumber(p.public_repos);
+            }
+        }
+
+        function repoCardHtml(r) {
+            const parts = (r.full_name || '').split('/');
+            const owner = parts[0] || USERNAME;
+            const name = r.name || parts[1] || '';
+            const safeOwner = escHtml(owner);
+            const safeName = escHtml(name);
+            const desc = r.description ? escHtml(r.description.slice(0, 120)) : '';
+            const lang = r.language ? escHtml(r.language) : '';
+            const ago = timeAgo(r.updated_at);
+            const visibility = r.fork ? 'fork' : 'public';
+            return `
+                <div class="repo-card">
+                    <div class="repo-card-head">
+                        <a class="repo-name" href="/repo.html?owner=${encodeURIComponent(owner)}&repo=${encodeURIComponent(name)}&provider=${PROVIDER}">${safeOwner} / ${safeName}</a>
+                        <span class="repo-visibility">${visibility}</span>
+                    </div>
+                    ${desc ? `<p class="repo-desc">${desc}</p>` : ''}
+                    <div class="repo-meta">
+                        ${lang ? `<span class="lang"><span class="lang-dot" style="background:${langColor(r.language)};"></span>${lang}</span>` : ''}
+                        ${(r.stars || 0) > 0 ? `<span>${STAR_ICON_HTML} ${formatNumber(r.stars)}</span>` : ''}
+                        ${(r.forks || 0) > 0 ? `<span>⑂ ${formatNumber(r.forks)}</span>` : ''}
+                        ${ago ? `<span>updated ${ago}</span>` : ''}
+                    </div>
+                </div>
+            `;
+        }
+
+        function renderRepos(repos) {
+            const container = document.getElementById('repos-section');
+            if (!container) return;
+            const navCount = document.getElementById('nav-repo-count');
+            if (navCount && !navCount.textContent) navCount.textContent = String(repos.length);
+
+            if (!repos.length) {
+                container.innerHTML = '<div class="repo-empty">no public repositories found</div>';
+                return;
+            }
+            container.innerHTML = repos.map(repoCardHtml).join('');
+        }
+
+        // ---- Repos con star del usuario (GitHub / Codeberg; GitLab no lo expone) ----
+        function normalizeStarred(r) {
+            if (!r || !r.full_name) return null;
+            return {
+                name: r.name || '',
+                full_name: r.full_name,
+                description: r.description || '',
+                language: r.language || '',
+                stars: r.stars_count !== undefined ? r.stars_count : (r.stargazers_count || 0),
+                forks: r.forks_count !== undefined ? r.forks_count : (r.forks || 0),
+                updated_at: r.updated_at || '',
+                fork: !!r.fork,
+            };
+        }
+
+        async function fetchStarred() {
+            const repos = [];
+            try {
+                if (PROVIDER === 'gh') {
+                    const headers = authHeaders();
+                    for (let page = 1; page <= 10; page++) {
+                        const res = await fetch(`https://api.github.com/users/${encodeURIComponent(USERNAME)}/starred?per_page=100&page=${page}`, { headers });
+                        if (!res.ok) break;
+                        const items = await res.json();
+                        if (!Array.isArray(items) || items.length === 0) break;
+                        repos.push(...items.map(normalizeStarred).filter(Boolean));
+                    }
+                } else if (PROVIDER === 'cb') {
+                    const token = localStorage.getItem('cb_token');
+                    const headers = token ? { 'Authorization': 'token ' + token } : {};
+                    for (let page = 1; page <= 10; page++) {
+                        const res = await fetch(`https://codeberg.org/api/v1/users/${encodeURIComponent(USERNAME)}/starred?limit=50&page=${page}`, { headers });
+                        if (!res.ok) break;
+                        const items = await res.json();
+                        if (!Array.isArray(items) || items.length === 0) break;
+                        repos.push(...items.map(normalizeStarred).filter(Boolean));
+                    }
+                }
+            } catch (_) {}
+            return repos;
+        }
+
+        // En la vista de perfil solo se muestra el conteo en el nav; la lista vive en la sección SPA de stars.
+        let _starredCache = null;
+        async function loadStarred() {
+            const starred = _starredCache || (_starredCache = await fetchStarred());
+            const navStars = document.getElementById('nav-star-count');
+            if (navStars && starred.length > 0) navStars.textContent = formatNumber(starred.length);
+        }
+
+        // ---- Vista SPA de repos con star (alterna secciones sin recargar, igual que repo.html) ----
+        let _currentView = 'overview';
+        let _prevTitle = '';
+
+        function navOverview() {
+            if (_currentView !== 'overview') switchView('overview');
+            scrollToTop();
+        }
+        function navRepos() {
+            if (_currentView !== 'overview') switchView('overview');
+            scrollToRepos();
+        }
+        function openStars() {
+            if (_currentView === 'stars') return;
+            switchView('stars');
+        }
+        function openPeople(kind) {
+            if (kind !== 'followers' && kind !== 'following') return;
+            if (_currentView === kind) return;
+            switchView(kind);
+        }
+
+        function switchView(view) {
+            if (_currentView === view) return;
+            const prev = _currentView;
+            const isOverview = view === 'overview';
+            const isStars = view === 'stars';
+            const isPeople = view === 'followers' || view === 'following';
+            _currentView = view;
+
+            if (!isOverview && prev === 'overview') _prevTitle = document.title;
+            if (isOverview) {
+                document.title = _prevTitle || `${USERNAME} · gitGost`;
+            } else {
+                const label = view === 'followers' ? 'followers' : view === 'following' ? 'following' : 'starred';
+                document.title = `${USERNAME} · ${label} · gitGost`;
+            }
+
+            const show = (el, on) => { if (el) el.classList.toggle('view-hidden', !on); };
+            show(document.getElementById('readme-section'), isOverview);
+            show(document.getElementById('repos-section-title'), isOverview);
+            show(document.getElementById('repos-section'), isOverview);
+            show(document.getElementById('starred-section-title'), isStars);
+            show(document.getElementById('starred-section'), isStars);
+            show(document.getElementById('people-section-title'), isPeople);
+            show(document.getElementById('people-section'), isPeople);
+            const aside = document.querySelector('.right-sidebar');
+            if (aside) aside.style.display = isOverview ? '' : 'none';
+
+            const navLinks = document.querySelectorAll('.left-nav a');
+            for (let i = 0; i < navLinks.length; i++) {
+                navLinks[i].classList.toggle('active', isOverview ? i === 0 : (isStars && i === 2));
+            }
+
+            if (isStars) _loadStars();
+            if (isPeople) _loadPeople(view);
+        }
+
+        async function _loadStars() {
+            const starredTitle = document.getElementById('starred-section-title');
+            const starredSec = document.getElementById('starred-section');
+            if (!starredTitle || !starredSec) return;
+            starredTitle.innerHTML = '<a class="stars-back" href="#" onclick="switchView(\'overview\'); return false;">‹ back to profile</a>';
+            const starred = _starredCache || (_starredCache = await fetchStarred());
+            const navStars = document.getElementById('nav-star-count');
+            if (navStars && starred.length > 0) navStars.textContent = formatNumber(starred.length);
+            if (!starred.length) {
+                starredSec.innerHTML = '<div class="repo-empty">no starred repositories found</div>';
+                return;
+            }
+            starredTitle.insertAdjacentHTML('beforeend', ` <span class="stars-count">· ${starred.length}</span>`);
+            starredSec.innerHTML = starred.map(repoCardHtml).join('');
+        }
+
+        // ---- Seguidores / siguiendo (vista SPA reutilizada para ambas listas) ----
+        let _peopleCache = {};
+        function personCardHtml(p) {
+            const safeUser = escHtml(p.username || '');
+            const safeName = p.name ? escHtml(p.name) : '';
+            const avatar = p.avatar_url ? escHtml(p.avatar_url) : '';
+            const href = `/${PROVIDER}/${encodeURIComponent(p.username || '')}`;
+            const initial = escHtml((p.name || p.username || '?').slice(0, 1).toUpperCase());
+            return `
+                <div class="repo-card person-card">
+                    <a class="person-avatar" href="${href}" tabindex="-1">${avatar ? `<img src="${avatar}" alt=""/>` : initial}</a>
+                    <div class="person-info">
+                        <a class="repo-name" href="${href}">${safeUser}</a>
+                        ${safeName ? `<div class="person-name">${safeName}</div>` : ''}
+                    </div>
+                </div>
+            `;
+        }
+
+        async function fetchPeople(kind) {
+            const users = [];
+            const path = kind === 'followers' ? 'followers' : 'following';
+            try {
+                if (PROVIDER === 'gh') {
+                    const headers = authHeaders();
+                    for (let page = 1; page <= 10; page++) {
+                        const res = await fetch(`https://api.github.com/users/${encodeURIComponent(USERNAME)}/${path}?per_page=100&page=${page}`, { headers });
+                        if (!res.ok) break;
+                        const items = await res.json();
+                        if (!Array.isArray(items) || items.length === 0) break;
+                        for (const u of items) {
+                            if (!u || !u.login) continue;
+                            users.push({ username: u.login, name: u.name || '', avatar_url: u.avatar_url || '' });
+                        }
+                    }
+                } else if (PROVIDER === 'gl') {
+                    // GitLab solo expone followers/following por id de usuario.
+                    const token = localStorage.getItem('gl_token');
+                    const headers = token ? { 'PRIVATE-TOKEN': token } : {};
+                    const uRes = await fetch(`https://gitlab.com/api/v4/users?username=${encodeURIComponent(USERNAME)}`, { headers });
+                    const uArr = uRes.ok ? await uRes.json() : [];
+                    const id = Array.isArray(uArr) && uArr[0] ? uArr[0].id : null;
+                    if (!id) return users;
+                    for (let page = 1; page <= 10; page++) {
+                        const res = await fetch(`https://gitlab.com/api/v4/users/${id}/${path}?per_page=100&page=${page}`, { headers });
+                        if (!res.ok) break;
+                        const items = await res.json();
+                        if (!Array.isArray(items) || items.length === 0) break;
+                        for (const u of items) {
+                            if (!u || !u.username) continue;
+                            users.push({ username: u.username, name: u.name || '', avatar_url: u.avatar_url || '' });
+                        }
+                    }
+                } else if (PROVIDER === 'cb') {
+                    const token = localStorage.getItem('cb_token');
+                    const headers = token ? { 'Authorization': 'token ' + token } : {};
+                    for (let page = 1; page <= 10; page++) {
+                        const res = await fetch(`https://codeberg.org/api/v1/users/${encodeURIComponent(USERNAME)}/${path}?limit=50&page=${page}`, { headers });
+                        if (!res.ok) break;
+                        const items = await res.json();
+                        if (!Array.isArray(items) || items.length === 0) break;
+                        for (const u of items) {
+                            if (!u || !u.login) continue;
+                            users.push({ username: u.login, name: u.full_name || u.name || '', avatar_url: u.avatar_url || '' });
+                        }
+                    }
+                }
+            } catch (_) {}
+            return users;
+        }
+
+        async function _loadPeople(kind) {
+            const titleEl = document.getElementById('people-section-title');
+            const listEl = document.getElementById('people-section');
+            if (!titleEl || !listEl) return;
+            const label = kind === 'followers' ? 'followers' : 'following';
+            titleEl.innerHTML = `<a class="stars-back" href="#" onclick="switchView('overview'); return false;">‹ back to profile</a> <span class="stars-count">${label}</span>`;
+            const people = _peopleCache[kind] || (_peopleCache[kind] = await fetchPeople(kind));
+            titleEl.querySelector('.stars-count').textContent = `${label} · ${people.length}`;
+            if (!people.length) {
+                listEl.innerHTML = `<div class="repo-empty">no ${label} found</div>`;
+                return;
+            }
+            listEl.innerHTML = people.map(personCardHtml).join('');
+        }
+
+        function renderReadme(text, baseUrl) {
+            const section = document.getElementById('readme-section');
+            if (!section) return;
+            const readmeUrl = baseUrl || ((PROVIDER === 'gh')
+                ? `https://raw.githubusercontent.com/${USERNAME}/${USERNAME}/HEAD/`
+                : (PROVIDER === 'gl')
+                    ? `https://gitlab.com/${USERNAME}/${USERNAME}/-/raw/HEAD/`
+                    : `https://codeberg.org/${USERNAME}/${USERNAME}/raw/branch/main/`);
+            const html = renderMd(text, readmeUrl);
+            section.innerHTML = `
+                <div class="readme-box">
+                    <div class="readme-header">README.md</div>
+                    <div class="readme-content readme">${html}</div>
+                </div>
+            `;
+        }
+
+        // ---- README del perfil (repo {user}/{user}) ----
+        // Se carga a través del backend (/api/users/readme) en vez de fetch directo:
+        // gitlab.com responde 302 hacia /users/sign_in cuando el repo no existe o es
+        // privado, y el navegador bloquea esa redirección cross-origin por CORS.
+        async function loadProfileReadme() {
+            const data = await apiGet(`/api/users/readme?provider=${PROVIDER}&user=${encodeURIComponent(USERNAME)}`);
+            if (!data || !data.content) return { text: '', baseUrl: '' };
+            return { text: data.content, baseUrl: data.base_url || '' };
+        }
+
+        // ---- Heatmap de commits (sidebar) ----
+        function dayKey(d) {
+            const y = d.getFullYear();
+            const m = String(d.getMonth() + 1).padStart(2, '0');
+            const day = String(d.getDate()).padStart(2, '0');
+            return `${y}-${m}-${day}`;
+        }
+
+        async function ghContributionDays(username) {
+            const days = new Map();
+            const repos = new Map();
+            let priv = 0;
+            const headers = authHeaders();
+            for (let page = 1; page <= 3; page++) {
+                const res = await fetch(`https://api.github.com/users/${encodeURIComponent(username)}/events?per_page=100&page=${page}`, { headers });
+                if (!res.ok) return page === 1 ? null : { days, repos, private: priv };
+                const events = await res.json();
+                if (!Array.isArray(events) || events.length === 0) break;
+                let pushFound = false;
+                for (const ev of events) {
+                    if (!ev || ev.type !== 'PushEvent' || !ev.created_at) continue;
+                    pushFound = true;
+                    const key = dayKey(new Date(ev.created_at));
+                    const pc = ev.payload || {};
+                    const n = (typeof pc.size === 'number' && pc.size > 0) ? pc.size
+                        : (pc.commits && pc.commits.length) ? pc.commits.length
+                        : 1;
+                    days.set(key, (days.get(key) || 0) + n);
+                    if (ev.repo && ev.repo.name) {
+                        const short = ev.repo.name.split('/')[1] || ev.repo.name;
+                        repos.set(short, (repos.get(short) || 0) + n);
+                    }
+                    if (ev.public === false) priv += n;
+                }
+                if (!pushFound) break;
+            }
+            return { days, repos, private: priv };
+        }
+
+        async function glContributionDays(username) {
+            const days = new Map();
+            const repos = new Map();
+            const headers = localStorage.getItem('gl_token') ? { 'PRIVATE-TOKEN': localStorage.getItem('gl_token') } : {};
+            const uRes = await fetch(`https://gitlab.com/api/v4/users?username=${encodeURIComponent(username)}`, { headers });
+            if (!uRes.ok) return null;
+            const users = await uRes.json();
+            if (!Array.isArray(users) || !users[0] || !users[0].id) return null;
+            const id = users[0].id;
+            for (let page = 1; page <= 6; page++) {
+                const res = await fetch(`https://gitlab.com/api/v4/users/${id}/events?action=pushed&per_page=100&page=${page}`, { headers });
+                if (!res.ok) break;
+                const events = await res.json();
+                if (!Array.isArray(events) || events.length === 0) break;
+                for (const ev of events) {
+                    if (!ev || !ev.created_at) continue;
+                    const key = dayKey(new Date(ev.created_at));
+                    const n = (ev.push_data && ev.push_data.commit_count) || 1;
+                    days.set(key, (days.get(key) || 0) + n);
+                    if (ev.project_id) repos.set(String(ev.project_id), (repos.get(String(ev.project_id)) || 0) + n);
+                }
+                if (events.length < 100) break;
+            }
+            // GitLab no incluye el nombre del proyecto en los eventos: se resuelven los 2 con más commits.
+            const topIds = Array.from(repos.entries()).sort((a, b) => b[1] - a[1]).slice(0, 2).map(([id]) => id);
+            const names = new Map();
+            await Promise.all(topIds.map(async (pid) => {
+                try {
+                    const res = await fetch(`https://gitlab.com/api/v4/projects/${pid}`, { headers });
+                    if (res.ok) {
+                        const pj = await res.json();
+                        if (pj && pj.path_with_namespace) names.set(pid, pj.path_with_namespace.split('/')[1] || pj.path_with_namespace);
+                    }
+                } catch (_) {}
+            }));
+            const reposNamed = new Map();
+            for (const [pid, count] of repos) reposNamed.set(names.get(pid) || `#${pid}`, count);
+            return { days, repos: reposNamed, private: 0 };
+        }
+
+        function renderContributions(container, data, p) {
+            const total = Array.from(data.days.values()).reduce((a, b) => a + b, 0);
+            const head = `
+                <div class="hm-head">
+                    <span class="hm-title">commits</span>
+                    <span class="hm-total">${total ? total.toLocaleString('en-US') + ' total' : ''}</span>
+                </div>
+            `;
+
+            if (!total) {
+                const noRepos = p && p.public_repos === 0;
+                container.innerHTML = `
+                    <div class="sb-contrib">
+                        ${head}
+                        <div class="hm-empty">${noRepos ? 'no repos' : 'no commits yet'}</div>
+                    </div>
+                `;
+                return;
+            }
+
+            const top = Array.from(data.repos.entries()).sort((a, b) => b[1] - a[1]).slice(0, 2);
+            let summary = top.length
+                ? 'to ' + top.map(([name, n]) => `${escHtml(name)} (${n.toLocaleString('en-US')})`).join(', ')
+                : '';
+            if (data.private > 0) summary += (summary ? ', ' : 'to ') + `private (${data.private.toLocaleString('en-US')})`;
+
+            const max = Math.max(...data.days.values());
+            const now = new Date();
+            const months = [];
+            const start = new Date(now.getFullYear(), now.getMonth() - 11, 1);
+            for (let d = new Date(start); d <= now; d = new Date(d.getFullYear(), d.getMonth() + 1, 1)) {
+                months.push({ y: d.getFullYear(), m: d.getMonth() });
+            }
+
+            const monthHtml = months.map(({ y, m }) => {
+                const first = new Date(y, m, 1);
+                const daysInMonth = new Date(y, m + 1, 0).getDate();
+                const lead = first.getDay();
+                const label = first.toLocaleDateString('en-US', { month: 'short' }) + " '" + String(y).slice(2);
+                let cells = '';
+                for (let i = 0; i < lead; i++) cells += '<div class="hm-cell hm-blank"></div>';
+                for (let day = 1; day <= daysInMonth; day++) {
+                    const date = new Date(y, m, day);
+                    if (date > now) { cells += '<div class="hm-cell hm-blank"></div>'; continue; }
+                    const key = dayKey(date);
+                    const n = data.days.get(key) || 0;
+                    const lvl = n === 0 ? '' : ' lvl' + Math.max(1, Math.min(4, Math.ceil((n / max) * 4)));
+                    cells += `<div class="hm-cell${lvl}" title="${key}: ${n} ${n === 1 ? 'commit' : 'commits'}"></div>`;
+                }
+                const rem = (7 - ((lead + daysInMonth) % 7)) % 7;
+                for (let i = 0; i < rem; i++) cells += '<div class="hm-cell hm-blank"></div>';
+                return `<div class="hm-month"><div class="hm-month-label">${label}</div><div class="hm-days">${cells}</div></div>`;
+            }).join('');
+
+            container.innerHTML = `
+                <div class="sb-contrib">
+                    ${head}
+                    ${summary ? `<div class="hm-summary">${summary}</div>` : ''}
+                    <div class="hm-months">${monthHtml}</div>
+                    <div class="hm-legend">
+                        less
+                        <span class="hm-cell"></span>
+                        <span class="hm-cell lvl1"></span>
+                        <span class="hm-cell lvl2"></span>
+                        <span class="hm-cell lvl3"></span>
+                        <span class="hm-cell lvl4"></span>
+                        more
+                    </div>
+                </div>
+            `;
+        }
+
+        async function loadContributions(p) {
+            const container = document.getElementById('sb-contributions');
+            if (!container || !p || p.type === 'org') return;
+            let data = null;
+            try {
+                if (PROVIDER === 'gh') data = await ghContributionDays(USERNAME);
+                else if (PROVIDER === 'gl') data = await glContributionDays(USERNAME);
+            } catch (_) { data = null; }
+            if (!data) return;
+            renderContributions(container, data, p);
+        }
+
+        function scrollToTop() {
+            window.scrollTo({ top: 0, behavior: 'smooth' });
+        }
+        function scrollToRepos() {
+            const el = document.getElementById('repos-section-title');
+            if (el) el.scrollIntoView({ behavior: 'smooth', block: 'start' });
+        }
+
+        function showError() {
+            const header = document.getElementById('profile-header');
+            if (header) header.innerHTML = '';
+            const sbAbout = document.getElementById('sb-about');
+            if (sbAbout) sbAbout.innerHTML = '';
+            const main = document.getElementById('main-content');
+            if (main) main.innerHTML = `<div class="profile-error">profile "${escHtml(USERNAME)}" not found on ${escHtml(providerMeta().label)}</div>`;
+        }
+
+        async function checkServiceStatus() {
+            try {
+                const response = await fetch(`${API_BASE}/api/status`);
+                if (response.ok) {
+                    const data = await response.json();
+                    if (data.panic_mode) {
+                        const banner = document.getElementById('suspension-banner');
+                        if (banner) banner.classList.add('active');
+                    }
+                }
+            } catch (error) {
+                console.error('Failed to check service status:', error);
+            }
+        }
+
+        async function init() {
+            const sbProvider = document.getElementById('sb-provider');
+            if (sbProvider) sbProvider.textContent = PROVIDER;
+            const sbUser = document.getElementById('sb-username');
+            if (sbUser) sbUser.textContent = USERNAME || '—';
+
+            if (!USERNAME) {
+                showError();
+                return;
+            }
+
+            const p = await apiGet(`/api/users/profile?provider=${PROVIDER}&user=${encodeURIComponent(USERNAME)}`);
+            if (!p) {
+                showError();
+                return;
+            }
+            renderProfile(p);
+
+            loadContributions(p);
+
+            const typeParam = p.type === 'org' ? '&type=org' : '';
+            const repos = await apiGet(`/api/users/repos?provider=${PROVIDER}&user=${encodeURIComponent(USERNAME)}${typeParam}`);
+            if (repos && Array.isArray(repos.repos)) {
+                renderRepos(repos.repos);
+            }
+
+            loadStarred();
+
+            const readme = await loadProfileReadme();
+            if (readme.text) renderReadme(readme.text, readme.baseUrl);
+
+            checkServiceStatus();
+        }
+
+        // ---- Markdown (simplificado de repo.html) ----
+        function renderMd(md, baseUrl) {
+            if (typeof marked === 'undefined') return `<pre>${escHtml(md)}</pre>`;
+            marked.setOptions({ gfm: true, breaks: false, headerIds: true, headerPrefix: '' });
+            const renderer = new marked.Renderer();
+            // marked@4 corta los bloques HTML en la primera línea en blanco; GitHub
+            // (CommonMark 0.30) los cierra en su etiqueta </tag>. Sin esta extensión, los
+            // README tipo "<h1 align=center>…<p>…iconos…</p></h1>" con contenido indentado
+            // se convierten en bloque de código. Se extiende el bloque hasta el cierre.
+            const BLOCK_HTML_TAGS = new Set(['address','article','aside','base','basefont','blockquote','body','caption','center','col','colgroup','dd','details','dialog','dir','div','dl','dt','fieldset','figcaption','figure','footer','form','frame','frameset','h1','h2','h3','h4','h5','h6','head','header','hgroup','hr','html','iframe','legend','li','link','main','menu','menuitem','meta','nav','noframes','ol','optgroup','option','p','param','section','source','summary','table','tbody','td','tfoot','th','thead','title','tr','track','ul']);
+            const tokenizer = new marked.Tokenizer();
+            const _origHtml = tokenizer.html;
+            tokenizer.html = function(src) {
+                const orig = _origHtml.call(this, src);
+                if (!orig) return null;
+                const m = /^ {0,3}<([a-z][a-z0-9-]*)\b/.exec(orig.raw);
+                if (!m || !BLOCK_HTML_TAGS.has(m[1])) return orig;
+                const tag = m[1];
+                const firstLineEnd = orig.raw.indexOf('\n');
+                const rest = firstLineEnd === -1 ? src.slice(orig.raw.length) : src.slice(firstLineEnd + 1);
+                const cm = new RegExp('^[ \\t]*</' + tag + '[^>]*>', 'im').exec(rest);
+                if (cm) {
+                    const raw = src.slice(0, firstLineEnd + 1 + cm.index + cm[0].length);
+                    return { type: 'html', raw: raw, pre: false, text: raw };
+                }
+                return orig;
+            };
+            renderer.link = function(token) {
+                const href  = (token && token.href  != null) ? token.href  : (arguments[0] || '');
+                const title = (token && token.title != null) ? token.title : (arguments[1] || null);
+                const text  = (token && token.text  != null) ? token.text  : (arguments[2] || '');
+                const t = title ? ` title="${escAttr(title)}"` : '';
+                if (typeof href === 'string' && href.startsWith('#')) {
+                    const anchor = href.slice(1);
+                    return anchor ? `<a href="#" data-anchor="${escAttr(anchor)}"${t}>${text}</a>` : `<a href="#"${t}>${text}</a>`;
+                }
+                const safeScheme = /^(?:https?|mailto|ftp|sftp|tel|sms|file):/i;
+                if (typeof href === 'string' && /^[a-z][a-z0-9+.-]*:/i.test(href) && !safeScheme.test(href)) {
+                    return `<a href="#"${t}>${text}</a>`;
+                }
+                return `<a href="${escAttr(href)}" target="_blank" rel="noopener"${t}>${text}</a>`;
+            };
+            renderer.code = function(token) {
+                const code = (token && token.text != null) ? token.text : (arguments[0] || '');
+                const lang = (token && token.lang != null) ? token.lang : (arguments[1] || '');
+                if (typeof hljs !== 'undefined' && lang && hljs.getLanguage(lang)) {
+                    const hl = hljs.highlight(code, { language: lang }).value;
+                    return `<pre style="white-space:pre;overflow-x:auto;"><code class="hljs language-${lang}">${hl}</code></pre>`;
+                } else if (typeof hljs !== 'undefined') {
+                    const hl = hljs.highlightAuto(code).value;
+                    return `<pre style="white-space:pre;overflow-x:auto;"><code class="hljs">${hl}</code></pre>`;
+                }
+                return `<pre style="white-space:pre;overflow-x:auto;"><code>${escHtml(code)}</code></pre>`;
+            };
+            renderer.image = function(token) {
+                let src   = (token && token.href  != null) ? token.href  : (arguments[0] || '');
+                const alt   = (token && token.text  != null) ? token.text  : (arguments[1] || '');
+                const title = (token && token.title != null) ? token.title : (arguments[2] || null);
+                const isDark = document.documentElement.getAttribute('data-theme') === 'dark' ||
+                    (!document.documentElement.getAttribute('data-theme') && window.matchMedia('(prefers-color-scheme: dark)').matches);
+                if (/#gh-light-mode-only$/i.test(src) && isDark)  return '';
+                if (/#gh-dark-mode-only$/i.test(src)  && !isDark) return '';
+                src = src.replace(/#gh-(light|dark)-mode-only$/i, '');
+                if (src && !/^https?:\/\//i.test(src) && !/^data:/i.test(src)) {
+                    src = baseUrl.replace(/\/$/, '') + '/' + src.replace(/^\.?\//, '');
+                }
+                return `<img src="${escAttr(src)}" alt="${escAttr(alt)}"${title ? ` title="${escAttr(title)}"` : ''} style="max-width:100%;border-radius:4px;" />`;
+            };
+            const _alertMeta = {
+                note:      { label: 'Note',      icon: '<svg class="octicon octicon-info" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8Zm8-6.5a6.5 6.5 0 1 0 0 13 6.5 6.5 0 0 0 0-13ZM6.5 7.75A.75.75 0 0 1 7.25 7h1a.75.75 0 0 1 .75.75v2.75h.25a.75.75 0 0 1 0 1.5h-2a.75.75 0 0 1 0-1.5h.25v-2h-.25a.75.75 0 0 1-.75-.75ZM8 6a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></svg>' },
+                tip:       { label: 'Tip',       icon: '<svg class="octicon octicon-light-bulb" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M8 1.5c-2.363 0-4 1.69-4 3.75 0 .984.424 1.625.984 2.304l.214.253c.223.264.47.556.673.848.284.411.537.896.621 1.49a.75.75 0 0 1-1.484.211c-.04-.282-.163-.547-.37-.847a8.456 8.456 0 0 0-.542-.68c-.084-.1-.173-.205-.268-.32C3.201 7.75 2.5 6.766 2.5 5.25 2.5 2.31 4.863 0 8 0s5.5 2.31 5.5 5.25c0 1.516-.701 2.5-1.328 3.259-.095.115-.184.22-.268.319-.207.245-.383.453-.541.681-.208.3-.33.565-.37.847a.751.751 0 0 1-1.485-.212c.084-.593.337-1.078.621-1.489.203-.292.45-.584.673-.848.075-.088.147-.173.213-.253.561-.679.985-1.32.985-2.304 0-2.06-1.637-3.75-4-3.75ZM5.75 12h4.5a.75.75 0 0 1 0 1.5h-4.5a.75.75 0 0 1 0-1.5ZM6 15.25a.75.75 0 0 1 .75-.75h2.5a.75.75 0 0 1 0 1.5h-2.5a.75.75 0 0 1-.75-.75Z"></path></svg>' },
+                important: { label: 'Important', icon: '<svg class="octicon octicon-report" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M0 1.75C0 .784.784 0 1.75 0h12.5C15.216 0 16 .784 16 1.75v9.5A1.75 1.75 0 0 1 14.25 13H8.06l-2.573 2.573A1.458 1.458 0 0 1 3 14.543V13H1.75A1.75 1.75 0 0 1 0 11.25Zm1.75-.25a.25.25 0 0 0-.25.25v9.5c0 .138.112.25.25.25h2a.75.75 0 0 1 .75.75v2.19l2.72-2.72a.749.749 0 0 1 .53-.22h6.5a.25.25 0 0 0 .25-.25v-9.5a.25.25 0 0 0-.25-.25Zm7 2.25v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 9a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>' },
+                warning:   { label: 'Warning',   icon: '<svg class="octicon octicon-alert" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M6.457 1.047c.659-1.234 2.427-1.234 3.086 0l6.082 11.378A1.75 1.75 0 0 1 14.082 15H1.918a1.75 1.75 0 0 1-1.543-2.575Zm1.763.707a.25.25 0 0 0-.44 0L1.698 13.132a.25.25 0 0 0 .22.368h12.164a.25.25 0 0 0 .22-.368Zm.53 3.996v2.5a.75.75 0 0 1-1.5 0v-2.5a.75.75 0 0 1 1.5 0ZM9 11a1 1 0 1 1-2 0 1 1 0 0 1 2 0Z"></path></svg>' },
+                caution:   { label: 'Caution',   icon: '<svg class="octicon octicon-stop" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="M4.47.22A.749.749 0 0 1 5 0h6c.199 0 .389.079.53.22l4.25 4.25c.141.14.22.331.22.53v6a.749.749 0 0 1-.22.53l-4.25 4.25A.749.749 0 0 1 11 16H5a.749.749 0 0 1-.53-.22L.22 11.53A.749.749 0 0 1 0 11V5c0-.199.079-.389.22-.53Zm.84 1.28L1.5 5.31v5.38l3.81 3.81h5.38l3.81-3.81V5.31L10.69 1.5ZM8 4a.75.75 0 0 1 .75.75v3.5a.75.75 0 0 1-1.5 0v-3.5A.75.75 0 0 1 8 4Zm0 8a1 1 0 1 1 0-2 1 1 0 0 1 0 2Z"></path></svg>' }
+            };
+            const _defaultBlockquote = renderer.blockquote;
+            renderer.blockquote = function(html) {
+                const body = (typeof html === 'string') ? html : '';
+                const firstP = body.match(/^<p>([\s\S]*?)<\/p>\s*/i);
+                if (!firstP) return _defaultBlockquote.call(this, body);
+                const lines = firstP[1].split('\n');
+                const marker = (lines[0] || '').trim().match(/^\[!(NOTE|TIP|IMPORTANT|WARNING|CAUTION)\](?:\s+(.*))?$/i);
+                if (!marker) return _defaultBlockquote.call(this, body);
+                const type = marker[1].toLowerCase();
+                const meta = _alertMeta[type] || _alertMeta.note;
+                const title = (marker[2] || '').trim() || meta.label;
+                const paraRest = lines.slice(1).join('\n').trim();
+                const inner = (paraRest ? `<p>${paraRest}</p>\n` : '') + body.slice(firstP[0].length);
+                return `<div class="markdown-alert markdown-alert-${type}">` +
+                    `<p class="markdown-alert-title">${meta.icon} ${title}</p>\n` +
+                    inner +
+                    `</div>\n`;
+            };
+            const emojified = md.replace(/:([a-z0-9_+-]+):/g, (match, name) => {
+                const map = { 'smile':'😄','grin':'😁','joy':'😂','heart_eyes':'😍','sunglasses':'😎','thumbsup':'👍','+1':'👍','thumbsdown':'👎','-1':'👎','clap':'👏','rocket':'🚀','fire':'🔥','star':'⭐','star2':'🌟','sparkles':'✨','warning':'⚠️','x':'❌','white_check_mark':'✅','heavy_check_mark':'✔️','exclamation':'❗','question':'❓','bulb':'💡','wrench':'🔧','hammer':'🔨','gear':'⚙️','lock':'🔒','unlock':'🔓','key':'🔑','mag':'🔍','bug':'🐛','tada':'🎉','construction':'🚧','memo':'📝','pencil':'📝','book':'📖','books':'📚','package':'📦','link':'🔗','computer':'💻','desktop_computer':'🖥️','iphone':'📱','email':'📧','mailbox':'📫','inbox_tray':'📥','outbox_tray':'📤','chart_with_upwards_trend':'📈','chart_with_downwards_trend':'📉','bar_chart':'📊','calendar':'📆','clock1':'🕐','hourglass':'⌛','zap':'⚡','umbrella':'☂️','sunny':'☀️','cloud':'☁️','snowflake':'❄️','rainbow':'🌈','earth_americas':'🌎','globe_with_meridians':'🌐','wave':'👋','eyes':'👀','100':'💯','speech_balloon':'💬','thought_balloon':'💭','zzz':'💤','muscle':'💪','pray':'🙏','point_right':'👉','point_left':'👈','point_up':'☝️','point_down':'👇','raised_hands':'🙌','ok_hand':'👌','v':'✌️','skull':'💀','ghost':'👻','robot':'🤖','alien':'👽','see_no_evil':'🙈','hear_no_evil':'🙉','speak_no_evil':'🙊','rotating_light':'🚨','no_entry':'⛔','stop_sign':'🛑','recycle':'♻️','heart':'❤️','broken_heart':'💔','blue_heart':'💙','green_heart':'💚','yellow_heart':'💛','purple_heart':'💜','orange_heart':'🧡','black_heart':'🖤','white_heart':'🤍','thinking':'🤔','facepalm':'🤦','shrug':'🤷','information_source':'ℹ️','new':'🆕','free':'🆓','cool':'🆒','ok':'🆗','sos':'🆘','up':'🆙','vs':'🆚','abc':'🔤','1234':'🔢','symbols':'🔣','arrow_right':'➡️','arrow_left':'⬅️','arrow_up':'⬆️','arrow_down':'⬇️','back':'🔙','end':'🔚','on':'🔛','soon':'🔜','top':'🔝','repeat':'🔁','fast_forward':'⏩','rewind':'⏪','twisted_rightwards_arrows':'🔀','loud_sound':'🔊','mute':'🔇','bell':'🔔','no_bell':'🔕','mega':'📣','loudspeaker':'📢','dart':'🎯','trophy':'🏆','medal_sports':'🏅','1st_place_medal':'🥇','2nd_place_medal':'🥈','3rd_place_medal':'🥉','video_game':'🎮','joystick':'🕹️','art':'🎨','musical_note':'🎵','notes':'🎶','microphone':'🎤','headphones':'🎧','guitar':'🎸','pizza':'🍕','hamburger':'🍔','coffee':'☕','beer':'🍺','cake':'🎂','birthday':'🎂','apple':'🍎','banana':'🍌','grapes':'🍇','strawberry':'🍓','dog':'🐶','cat':'🐱','mouse':'🐭','bear':'🐻','panda_face':'🐼','fox_face':'🦊','wolf':'🐺','lion':'🦁','tiger':'🐯','cow':'🐮','pig':'🐷','frog':'🐸','monkey_face':'🐵','chicken':'🐔','penguin':'🐧','bird':'🐦','fish':'🐟','whale':'🐳','dolphin':'🐬','turtle':'🐢','snake':'🐍','ant':'🐜','bee':'🐝','butterfly':'🦋','crab':'🦀','shark':'🦈','whale2':'🐋','elephant':'🐘','gorilla':'🦍','unicorn':'🦄','zebra':'🦓' };
+                return map[name] || match;
+            });
+            let result = marked.parse(emojified, { renderer, tokenizer });
+            result = result.replace(/<a\s+[^>]*?href=("[^"]+"|'[^']+')([^>]*?)>/gi, (match, hrefQuoted) => {
+                const quote = hrefQuoted[0];
+                const href = hrefQuoted.slice(1, -1);
+                if (href && !/^https?:\/\//i.test(href) && !/^mailto:/i.test(href) && !/^file:/i.test(href) && !/^#/.test(href) && !/^\//.test(href)) {
+                    const resolved = baseUrl.replace(/\/$/, '') + '/' + href.replace(/^\.?\//, '');
+                    return match.replace(hrefQuoted, quote + resolved + quote);
+                }
+                return match;
+            });
+            if (typeof DOMPurify !== 'undefined') {
+                result = DOMPurify.sanitize(result, {
+                    ALLOW_DATA_ATTR: true,
+                    ADD_ATTR: ['target', 'rel', 'data-anchor', 'referrerpolicy'],
+                    ALLOWED_URI_REGEXP: /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|file):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i
+                });
+            }
+            return result;
+        }
+
+        init();
+    </script>
+</body>
+</html>
diff --git a/web/repo.html b/web/repo.html
index 9948066..7bdc6c8 100644
--- a/web/repo.html
+++ b/web/repo.html
@@ -17,6 +17,7 @@
     <script>if (typeof hljs !== 'undefined') hljs.configure({ ignoreUnescapedHTML: true });</script>
     <script src="https://cdn.jsdelivr.net/npm/marked@4/marked.min.js"></script>
     <script src="https://cdn.jsdelivr.net/npm/dompurify@3/dist/purify.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/mermaid@11.16.1/dist/mermaid.min.js" integrity="sha384-aBQXj4hK6Jm05i7aQAsUV3bLdSUrHX1BGYfMB0166TtWt/RRaw+h0Eelme9OCOvy" crossorigin="anonymous"></script>
     <style>
         :root {
             --bg: #ffffff;
@@ -156,6 +157,42 @@
             background: var(--bg);
             padding: 0.4rem 0;
         }
+        .repo-search {
+            padding: 0.45rem;
+            border-bottom: 1px solid var(--border);
+            background: var(--bg);
+            position: sticky;
+            top: 0;
+            z-index: 1;
+        }
+        .repo-search-input {
+            width: 100%;
+            padding: 0.38rem 0.5rem;
+            border: 1px solid var(--border);
+            border-radius: 4px;
+            background: var(--bg-secondary);
+            color: var(--fg);
+            font: 0.75rem "IBM Plex Mono", monospace;
+        }
+        .repo-search-input:focus { outline: 1px solid var(--accent); border-color: var(--accent); }
+        .repo-search-actions { display: flex; gap: 0.3rem; margin-top: 0.35rem; }
+        .repo-search-btn {
+            flex: 1;
+            border: 1px solid var(--border);
+            border-radius: 3px;
+            background: transparent;
+            color: var(--fg-muted);
+            cursor: pointer;
+            padding: 0.25rem;
+            font: 0.67rem "IBM Plex Mono", monospace;
+        }
+        .repo-search-btn:hover { color: var(--accent); border-color: var(--accent); }
+        .search-results { padding: 0.9rem 1.25rem; }
+        .search-results h2 { margin: 0 0 0.7rem; font: 600 0.88rem "IBM Plex Mono", monospace; }
+        .search-result { display: block; width: 100%; text-align: left; padding: 0.55rem 0.65rem; margin: 0; border: 0; border-bottom: 1px solid var(--border); background: transparent; color: var(--fg); cursor: pointer; font: 0.76rem "IBM Plex Mono", monospace; }
+        .search-result:hover { background: var(--bg-hover); }
+        .search-result-path { color: var(--accent); display: block; }
+        .search-result-note { color: var(--fg-muted); font-size: 0.68rem; margin-top: 0.2rem; display: block; }
         .tree-item {
             display: flex;
             align-items: center;
@@ -226,6 +263,68 @@
             white-space: pre-wrap;
             word-break: break-all;
         }
+        /* Último commit del archivo: fila informativa sobre el toolbar del archivo. */
+        .file-last-commit {
+            display: flex;
+            align-items: center;
+            gap: 0.6rem;
+            padding: 0.45rem 0.75rem;
+            border-bottom: 1px solid var(--border);
+            background: var(--bg);
+            font-size: 0.72rem;
+            font-family: "IBM Plex Mono", monospace;
+            color: var(--fg-secondary);
+            min-height: 2.1rem;
+        }
+        .file-last-commit .flc-avatar {
+            flex: none;
+            width: 1.35rem;
+            height: 1.35rem;
+            border-radius: 50%;
+            object-fit: cover;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            background: var(--accent);
+            color: var(--bg);
+            font-size: 0.66rem;
+            font-weight: 600;
+            text-transform: uppercase;
+        }
+        .file-last-commit .flc-main {
+            flex: 1;
+            min-width: 0;
+            display: flex;
+            align-items: center;
+            gap: 0.6rem;
+        }
+        .file-last-commit .flc-msg {
+            overflow: hidden;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+            color: var(--fg);
+        }
+        .file-last-commit .flc-meta {
+            flex: none;
+            display: flex;
+            align-items: center;
+            white-space: nowrap;
+            color: var(--fg-secondary);
+        }
+        .file-last-commit .flc-meta > * + *::before {
+            content: "·";
+            margin: 0 0.45rem;
+            color: var(--fg-secondary);
+        }
+        .file-last-commit .flc-author { color: var(--fg-muted); }
+        .profile-link { color: inherit; text-decoration: none; }
+        .profile-link:hover { color: var(--accent); text-decoration: underline; }
+        .file-last-commit .flc-sha {
+            color: var(--accent);
+            cursor: pointer;
+            text-decoration: none;
+        }
+        .file-last-commit .flc-sha:hover { text-decoration: underline; }
         .file-toolbar {
             position: sticky;
             top: 0;
@@ -312,6 +411,19 @@
             white-space: pre;
         }
         .readme pre code { background: none; padding: 0; border: none; font-size: 0.82rem; }
+        /* Diagramas Mermaid: el bloque sin renderizar se muestra como código y el gráfico ya renderizado permite scroll horizontal. */
+        .mermaid {
+            white-space: pre;
+            font-family: "IBM Plex Mono", monospace;
+            font-size: 0.82rem;
+            background: var(--code-bg);
+            border: 1px solid var(--border);
+            border-radius: 6px;
+            padding: 1rem 1.25rem;
+            overflow-x: auto;
+            margin: 1rem 0;
+        }
+        .mermaid-graph { margin: 1rem 0; overflow-x: auto; }
         .readme a { color: var(--accent); text-decoration: none; }
         .readme a:hover { text-decoration: underline; }
         .readme blockquote {
@@ -478,6 +590,82 @@
             opacity: 0.8;
         }
 
+        .sb-contributors {
+            display: flex;
+            flex-wrap: wrap;
+            gap: 0.35rem;
+        }
+        .sb-contributor {
+            width: 1.8rem;
+            height: 1.8rem;
+            border-radius: 50%;
+            overflow: hidden;
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            background: var(--accent);
+            text-decoration: none;
+        }
+        .sb-contributor img {
+            width: 100%;
+            height: 100%;
+            object-fit: cover;
+            display: block;
+        }
+        .sb-home-row {
+            display: flex;
+            align-items: center;
+            padding: 0.2rem 0;
+        }
+        .sb-home-link {
+            display: inline-flex;
+            align-items: center;
+            gap: 0.35rem;
+            min-width: 0;
+            color: var(--accent);
+            text-decoration: none;
+            font-family: "IBM Plex Mono", monospace;
+            font-size: 0.72rem;
+        }
+        .sb-home-link svg { flex: none; }
+        .sb-home-link span {
+            overflow: hidden;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+        }
+
+        .sb-deploy { padding: 0.3rem 0; border-bottom: 1px solid var(--border); }
+        .sb-deploy:last-child { border-bottom: none; }
+        .sb-deploy-head { display: flex; justify-content: space-between; align-items: center; gap: 0.4rem; }
+        .sb-deploy-env {
+            flex: 1 1 auto;
+            min-width: 0;
+            font-family: "IBM Plex Mono", monospace;
+            font-size: 0.72rem;
+            color: var(--fg);
+            overflow: hidden;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+        }
+        .sb-deploy-status {
+            flex: none;
+            font-family: "IBM Plex Mono", monospace;
+            font-size: 0.62rem;
+            text-transform: uppercase;
+        }
+        .sb-deploy-status.success { color: #22c55e; }
+        .sb-deploy-status.failed { color: #ef4444; }
+        .sb-deploy-status.running { color: #f59e0b; }
+        .sb-deploy-status.pending { color: var(--fg-muted); }
+        .sb-deploy-meta {
+            font-size: 0.68rem;
+            color: var(--fg-muted);
+            margin-top: 0.15rem;
+            overflow: hidden;
+            text-overflow: ellipsis;
+            white-space: nowrap;
+        }
+
         .lang-bar {
             display: flex;
             height: 6px;
@@ -1690,6 +1878,10 @@
                         flex-basis: 100%;
                         max-width: 100%;
                     }
+                    .file-last-commit {
+                        flex-wrap: wrap;
+                        gap: 0.3rem;
+                    }
 
                     .readme {
                         padding: 1rem 1.25rem;
@@ -2058,9 +2250,7 @@
 </svg> about</a>
                     </nav>
 
-        <div class="file-tree" id="file-tree" style="display:none;">
-            <div class="tree-loading">loading...</div>
-        </div>
+        <div class="file-tree" id="file-tree" style="display:none;"></div>
         <div class="code-panel" id="code-panel">
             <div class="code-loading">select a file</div>
         </div>
@@ -2077,19 +2267,59 @@
                     <div class="msb-tags" id="msb-tags"></div>
                 </div>
                 <div class="msb-section">
+                    <div class="msb-row" id="msb-home-row" style="display:none">
+                        <a class="sb-home-link" id="msb-home-link" href="#" target="_blank" rel="noopener">
+                            <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
+                                <path d="M0 0h24v24H0z" fill="none" />
+                                <path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M9.621 7.5H7.25a4.5 4.5 0 0 0-4.5 4.5v0a4.5 4.5 0 0 0 4.5 4.5h2.371m4.758-9h2.371a4.5 4.5 0 0 1 4.5 4.5v0a4.5 4.5 0 0 1-4.5 4.5h-2.371M7.243 12h9.514" />
+                            </svg>
+                            <span></span>
+                        </a>
+                    </div>
                     <div class="msb-row"><span>created</span><span class="val" id="msb-created">—</span></div>
+                    <div class="msb-row"><span>forks</span><span class="val" id="msb-forks">—</span></div>
+                    <div class="msb-row"><span>watching</span><span class="val" id="msb-watching">—</span></div>
                     <div class="msb-row"><span>type</span><span class="val mirror" id="msb-status">public proxy</span></div>
                     <div class="msb-row"><span>license</span><span class="val" id="msb-license">—</span></div>
+                    <div class="msb-row"><span>size</span><span class="val" id="msb-size">—</span></div>
+                    <div class="msb-row"><span>lfs</span><span class="val" id="msb-lfs">—</span></div>
                 </div>
                 <div class="msb-section">
                     <div class="msb-label" id="msb-rel-label" style="display:none">Latest Release</div>
                     <div id="msb-latest-release"></div>
                 </div>
+                <div class="msb-section full" id="msb-tags-section" style="display:none">
+                    <div class="msb-label">Tags</div>
+                    <div id="msb-tags-list"></div>
+                    <div style="padding:0.2rem 0 0;">
+                        <a href="#" onclick="closeMobileSidebar(); showView('tags'); return false;" style="color:var(--fg-muted);text-decoration:none;font-size:0.75rem;">
+                            View all <span id="msb-tags-count"></span> tags
+                        </a>
+                    </div>
+                </div>
                 <div class="msb-section full" id="msb-langs-section" style="display:none">
                     <div class="msb-label">Languages</div>
                     <div class="lang-bar" id="msb-lang-bar"></div>
                     <div class="lang-legend" id="msb-lang-legend"></div>
                 </div>
+                <div class="msb-section full" id="msb-contributors-section" style="display:none">
+                    <div class="msb-label">Contributors</div>
+                    <div class="sb-contributors" id="msb-contributors"></div>
+                    <div style="padding:0.2rem 0 0;">
+                        <a href="#" onclick="closeMobileSidebar(); showView('contributors'); return false;" style="color:var(--fg-muted);text-decoration:none;font-size:0.75rem;">
+                            View all <span id="msb-contributors-count"></span> contributors
+                        </a>
+                    </div>
+                </div>
+                <div class="msb-section full" id="msb-deployments-section" style="display:none">
+                    <div class="msb-label">Deployments</div>
+                    <div id="msb-deployments"></div>
+                    <div style="padding:0.2rem 0 0;">
+                        <a href="#" onclick="closeMobileSidebar(); showView('deployments'); return false;" style="color:var(--fg-muted);text-decoration:none;font-size:0.75rem;">
+                            View all <span id="msb-deployments-count"></span> deployments
+                        </a>
+                    </div>
+                </div>
                 <div class="msb-section full">
                     <div class="msb-actions">
                         <button class="msb-btn" id="msb-star-btn" onclick="doStar()" title="Add to stars">
@@ -2117,12 +2347,30 @@
                 <div class="sidebar-tags" id="sb-tags"></div>
             </div>
             <div class="sidebar-section">
+                <div class="sb-home-row" id="sb-home-row" style="display:none">
+                    <a class="sb-home-link" id="sb-home-link" href="#" target="_blank" rel="noopener">
+                        <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
+                            <path d="M0 0h24v24H0z" fill="none" />
+                            <path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M9.621 7.5H7.25a4.5 4.5 0 0 0-4.5 4.5v0a4.5 4.5 0 0 0 4.5 4.5h2.371m4.758-9h2.371a4.5 4.5 0 0 1 4.5 4.5v0a4.5 4.5 0 0 1-4.5 4.5h-2.371M7.243 12h9.514" />
+                        </svg>
+                        <span></span>
+                    </a>
+                </div>
                 <div class="sidebar-row"><span>created</span><span class="val" id="sb-created">—</span></div>
+                <div class="sidebar-row"><span>forks</span><span class="val" id="sb-forks">—</span></div>
+                <div class="sidebar-row"><span>watching</span><span class="val" id="sb-watching">—</span></div>
 <div class="sidebar-row"><span>type</span><span class="val mirror" id="sb-status">public proxy</span></div>
 <div class="sidebar-row"><span>license</span><span class="val" id="sb-license">—</span></div>
+                <div class="sidebar-row"><span>size</span><span class="val" id="sb-size">—</span></div>
+                <div class="sidebar-row"><span>lfs</span><span class="val" id="sb-lfs">—</span></div>
             </div>
             <div class="sidebar-section">
                 <div class="sidebar-actions">
+                    <button class="sidebar-btn" id="sb-security-btn" style="display:none" onclick="openSecurityPolicy()" title="View security policy"><svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
+	<path d="M0 0h24v24H0z" fill="none" />
+	<path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M12 3.25l7 2.9v5.4c0 4.6-2.9 7.9-7 9.2c-4.1-1.3-7-4.6-7-9.2v-5.4z" />
+	<path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M8.8 11.6l2.2 2.2l4.2-4.2" />
+</svg> Security Policy</button>
                     <button class="sidebar-btn" id="sb-star-btn" onclick="doStar()" title="Solo funciona en localhost"><svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
 	<path d="M0 0h24v24H0z" fill="none" />
 	<path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M10.704 4.325a1.5 1.5 0 0 1 2.592 0l1.818 3.12a1.5 1.5 0 0 0 .978.712l3.53.764a1.5 1.5 0 0 1 .8 2.465l-2.405 2.693a1.5 1.5 0 0 0-.374 1.15l.363 3.593a1.5 1.5 0 0 1-2.097 1.524l-3.304-1.456a1.5 1.5 0 0 0-1.21 0l-3.304 1.456a1.5 1.5 0 0 1-2.097-1.524l.363-3.593a1.5 1.5 0 0 0-.373-1.15l-2.406-2.693a1.5 1.5 0 0 1 .8-2.465l3.53-.764a1.5 1.5 0 0 0 .979-.711z" />
@@ -2146,6 +2394,33 @@
                     </a>
                 </div>
             </div>
+            <div class="sidebar-section" id="sb-tags-section" style="display:none">
+                <div class="sidebar-label">Tags</div>
+                <div id="sb-tags-list"></div>
+                <div style="padding:0.2rem 0 0;">
+                    <a href="#" onclick="showView('tags'); return false;" style="color:var(--fg-muted);text-decoration:none;font-size:0.75rem;">
+                        View all <span id="sb-tags-count"></span> tags
+                    </a>
+                </div>
+            </div>
+            <div class="sidebar-section" id="sb-deployments-section" style="display:none">
+                <div class="sidebar-label">Deployments</div>
+                <div id="sb-deployments"></div>
+                <div style="padding:0.2rem 0 0;">
+                    <a href="#" onclick="showView('deployments'); return false;" style="color:var(--fg-muted);text-decoration:none;font-size:0.75rem;">
+                        View all <span id="sb-deployments-count"></span> deployments
+                    </a>
+                </div>
+            </div>
+            <div class="sidebar-section" id="sb-contributors-section" style="display:none">
+                <div class="sidebar-label">Contributors</div>
+                <div class="sb-contributors" id="sb-contributors"></div>
+                <div style="padding:0.2rem 0 0;">
+                    <a href="#" onclick="showView('contributors'); return false;" style="color:var(--fg-muted);text-decoration:none;font-size:0.75rem;">
+                        View all <span id="sb-contributors-count"></span> contributors
+                    </a>
+                </div>
+            </div>
             <div class="sidebar-section" id="sb-langs-section" style="display:none">
                 <div class="sidebar-label">Languages</div>
                 <div class="lang-bar" id="sb-lang-bar"></div>
@@ -2247,6 +2522,13 @@
         else if (rv.provider === 'gitlab') rv.provider = 'gl';
         else if (rv.provider === 'codeberg') rv.provider = 'cb';
 
+        function profileLink(username, label, className = '') {
+            const name = String(username || '').trim();
+            if (!name) return escHtml(label || '');
+            const classes = `profile-link${className ? ` ${className}` : ''}`;
+            return `<a class="${classes}" href="/${rv.provider}/${encodeURIComponent(name)}" onclick="event.stopPropagation();">${escHtml(label || name)}</a>`;
+        }
+
         function currentBranch() { return rv.branch || ''; }
 
         const BRANCH_SVG = `<svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24"><path d="M0 0h24v24H0z" fill="none"/><path fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" d="M7 8.25a2.75 2.75 0 1 0 0-5.5a2.75 2.75 0 0 0 0 5.5m0 0v7.5m0-7.5c0 2.9 2.35 5.25 5.25 5.25h2M7 15.75a2.75 2.75 0 1 0 0 5.5a2.75 2.75 0 0 0 0-5.5m7.25-2.25a2.75 2.75 0 1 0 5.5 0a2.75 2.75 0 0 0-5.5 0"/></svg>`;
@@ -2256,7 +2538,7 @@
             if (!el) return;
             const branchName = rv.branch ? escHtml(rv.branch) : '';
             el.innerHTML =
-                `<a href="/?q=${encodeURIComponent(rv.owner)}" style="color:var(--fg-muted);text-decoration:none;" onmouseover="this.style.color='var(--accent)'" onmouseout="this.style.color='var(--fg-muted)'">${escHtml(rv.owner)}</a>`+
+                `<a href="/${rv.provider}/${encodeURIComponent(rv.owner)}" style="color:var(--fg-muted);text-decoration:none;" onmouseover="this.style.color='var(--accent)'" onmouseout="this.style.color='var(--fg-muted)'">${escHtml(rv.owner)}</a>`+
                 `<span style="color:var(--fg-muted);">/</span>`+
                 `<a href="#" onclick="showView('home');return false;" style="color:var(--fg-muted);text-decoration:none;" onmouseover="this.style.color='var(--accent)'" onmouseout="this.style.color='var(--fg-muted)'">${escHtml(rv.repo)}</a>`+
                 (branchName ? `<span style="color:var(--fg-muted);">/</span><span style="color:var(--fg-muted);display:inline-flex;align-items:center;gap:0.25rem;">${BRANCH_SVG}${branchName}</span>` : '');
@@ -2294,6 +2576,7 @@
             _updateStarBtn();
             loadCommitCount();
             loadReleaseCount();
+            loadTagCount();
             checkPackages();
             const codePanel = document.getElementById('code-panel');
             if (codePanel) codePanel.addEventListener('click', handlePanelLinkClick);
@@ -2340,6 +2623,15 @@
             } else if (view === 'releases') {
                 fileTree.style.display = 'none';
                 loadReleases();
+            } else if (view === 'tags') {
+                fileTree.style.display = 'none';
+                loadTags();
+            } else if (view === 'deployments') {
+                fileTree.style.display = 'none';
+                loadDeploymentsView();
+            } else if (view === 'contributors') {
+                fileTree.style.display = 'none';
+                loadContributorsView();
             } else {
                 fileTree.style.display = 'none';
                 codePanel.innerHTML = `<div class="code-loading" style="color:var(--fg-secondary)">/${view} &mdash; coming soon</div>`;
@@ -2348,6 +2640,26 @@
 
         async function loadReadme() {
             const panel = document.getElementById('code-panel');
+            // La URL del repo puede llegar sin ?branch= (index.html no la incluye) y loadRepoInfo
+            // corre en paralelo; sin la rama por defecto, las imágenes relativas del README se
+            // resuelven a una ruta sin /raw/branch/, que el proxy cb rechaza con 403.
+            if (!currentBranch()) {
+                try {
+                    let d = null;
+                    if (rv.provider === 'cb') {
+                        const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}`);
+                        if (res.ok) d = await res.json();
+                    } else if (rv.provider === 'gh') {
+                        const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}`);
+                        if (res.ok) d = await res.json();
+                    } else {
+                        const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                        const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}`);
+                        if (res.ok) d = await res.json();
+                    }
+                    if (d && d.default_branch) rv.branch = d.default_branch;
+                } catch (e) { /* sin rama, se continúa igual */ }
+            }
             try {
                 let item = null;
                 const ref = currentBranch();
@@ -2376,13 +2688,13 @@
                         text = text.replace(/is undefined/g, 'is hosted on GitLab.com');
                         text = text.replace(/located at undefined/g, 'located at https://gitlab.com/gitlab-org/gitlab-foss/');
                         text = text.split('\n').filter(line => !line.includes('undefined')).join('\n');
-                        _renderFilePanel('README.md', { content: text, size: readmeSize, isMd: true, previewHtml: `<div class="readme">${renderMd(text)}</div>` });
+                        _renderFilePanel('README.md', { path: 'README.md', lastCommitScope: 'repo', content: text, size: readmeSize, isMd: true, previewHtml: `<div class="readme">${renderMd(text)}</div>` });
                         panel.querySelectorAll('pre code').forEach(b => hljs.highlightElement(b));
                         return;
                     }
                 }
                 if (item) {
-                    await loadFile(item);
+                    await loadFile(item, { lastCommitScope: 'repo' });
                 } else {
                     panel.innerHTML = '<div class="code-loading">no README</div>';
                 }
@@ -2478,7 +2790,7 @@
                 return `<div class="issue-item" style="cursor:pointer;" onclick="showIssueDetail(${num})">
                     <span class="issue-num">#${num}</span>
                     <span class="issue-title">${escHtml(i.title)}${labels}</span>
-                    <span class="issue-meta">${assignee ? assignee + ' · ' : ''}${user} · ${date}</span>
+                    <span class="issue-meta">${assignee ? profileLink(assignee) + ' · ' : ''}${profileLink(user)} · ${date}</span>
                 </div>`;
             }).join('');
 
@@ -2521,7 +2833,7 @@
                         ${labels ? `<div style="margin-bottom:0.75rem;display:flex;gap:0.3rem;flex-wrap:wrap;">${labels}</div>` : ''}
                         <div class="issue-detail-meta">
                             ${avatar ? `<img class="issue-detail-avatar" src="${avatar}" alt="${user}" />` : ''}
-                            <strong style="color:var(--fg);">${escHtml(user)}</strong>
+                            <strong style="color:var(--fg);">${profileLink(user)}</strong>
                             <span>opened ${created}</span>
                             <span style="margin-left:auto;"><a class="issue-ext-link" href="${url}" target="_blank" rel="noopener">${safeOwner}/${safeRepo}#${num} <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
 	<path d="M0 0h24v24H0z" fill="none" />
@@ -2601,7 +2913,7 @@
                             ? `<img src="${cAvatar}" style="width:26px;height:26px;border-radius:50%;flex-shrink:0;border:1px solid var(--border);" />`
                             : `<div class="reply-avatar"><img src="assets/logos/noun-anonymous-6758229.svg" width="16" height="16" style="display:block;" /></div>`}
                         <div class="comment-bubble">
-                            <div class="comment-meta"><strong style="color:var(--fg);">${escHtml(cUser)}</strong> &middot; ${cDate}</div>
+                            <div class="comment-meta"><strong style="color:var(--fg);">${profileLink(cUser)}</strong> &middot; ${cDate}</div>
                             <div class="readme" style="font-size:0.8rem;">${renderMd(cBody)}</div>
                         </div>`;
                     list.appendChild(li);
@@ -2822,7 +3134,7 @@
                     </span>
                     <span class="issue-meta" style="display:flex;flex-direction:column;align-items:flex-end;gap:0.2rem;flex-shrink:0;">
                         ${reviewState}
-                        <span>${user} · ${date}</span>
+                        <span>${profileLink(user)} · ${date}</span>
                     </span>
                 </div>`;
             }).join('');
@@ -2939,7 +3251,7 @@
                     <span class="issue-num">#${num}</span>
                     <span class="issue-title">${escHtml(title)}${cat}${comments}</span>
                     <span class="issue-meta" style="display:flex;flex-direction:column;align-items:flex-end;gap:0.2rem;flex-shrink:0;">
-                        <span>${escHtml(user)}${date ? ' · ' + date : ''}</span>
+                        <span>${profileLink(user)}${date ? ' · ' + date : ''}</span>
                     </span>
                 </div>`;
             }).join('');
@@ -2984,7 +3296,7 @@
                     return `<li class="comment-item">
                         <div class="reply-avatar"><img src="assets/logos/noun-anonymous-6758229.svg" width="16" height="16" style="display:block;" /></div>
                         <div class="comment-bubble">
-                            <div class="comment-meta"><strong style="color:var(--fg);">${escHtml(cUser)}</strong> ${answerBadge} · ${cDate}</div>
+                            <div class="comment-meta"><strong style="color:var(--fg);">${profileLink(cUser)}</strong> ${answerBadge} · ${cDate}</div>
                             <div class="readme" style="font-size:0.8rem;">${renderMd(cBody)}</div>
                         </div>
                     </li>`;
@@ -2999,7 +3311,7 @@
                             </div>
                             <div style="margin-bottom:0.75rem;display:flex;gap:0.3rem;flex-wrap:wrap;">${cat}${answered}</div>
                             <div class="issue-detail-meta">
-                                <strong style="color:var(--fg);">${escHtml(user)}</strong>
+                                <strong style="color:var(--fg);">${profileLink(user)}</strong>
                                 <span>opened ${created}</span>
                                 <span style="margin-left:auto;"><a class="issue-ext-link" href="${url}" target="_blank" rel="noopener">${escHtml(rv.owner)}/${escHtml(rv.repo)}#${num} <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
 	<path d="M0 0h24v24H0z" fill="none" />
@@ -3388,6 +3700,7 @@
                 const msg = c.commit?.message || c.message || c.title || '';
                 const firstLine = msg.split('\n')[0];
                 const author = c.commit?.author?.name || c.author_name || c.author?.login || '';
+                const authorUsername = c.author?.login || c.author?.username || '';
                 const date = new Date(c.commit?.author?.date || c.authored_date || c.created_at)
                     .toLocaleDateString('en', {month:'short', day:'numeric', year:'numeric'});
                 const time = new Date(c.commit?.author?.date || c.authored_date || c.created_at)
@@ -3410,7 +3723,7 @@
                         <div class="commit-msg">${escHtml(firstLine)}</div>
                         <div class="commit-meta">
                             <span class="commit-sha">${sha}</span>
-                            <span class="commit-author">${escHtml(author)}</span>
+                            <span class="commit-author">${profileLink(authorUsername, author)}</span>
                             <span class="commit-time">${date} at ${time}</span>
                         </div>
                     </div>
@@ -3577,8 +3890,112 @@
             panel.innerHTML = header + '<div class="commit-list">' + list + '</div>';
         }
 
+        async function loadTags() {
+            const panel = document.getElementById('code-panel');
+            panel.innerHTML = '<div class="code-loading">loading tags...</div>';
+            try {
+                let tags = [];
+                if (rv.provider === 'gh') {
+                    let page = 1;
+                    while (true) {
+                        const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/tags?per_page=100&page=${page}`);
+                        if (!res.ok) break;
+                        const data = await res.json();
+                        if (!Array.isArray(data) || data.length === 0) break;
+                        tags.push(...data);
+                        const link = res.headers.get('Link') || '';
+                        if (!/<[^>]+>;\s*rel="next"/.test(link)) break;
+                        page++;
+                        if (page > 10) break;
+                    }
+                } else if (rv.provider === 'cb') {
+                    let page = 1;
+                    while (true) {
+                        const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/tags?limit=50&page=${page}`);
+                        if (!res.ok) break;
+                        const data = await res.json();
+                        if (!Array.isArray(data) || data.length === 0) break;
+                        tags.push(...data);
+                        const link = res.headers.get('Link') || '';
+                        if (!/<[^>]+>;\s*rel="next"/.test(link)) break;
+                        page++;
+                        if (page > 10) break;
+                    }
+                } else {
+                    const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                    let page = 1;
+                    while (true) {
+                        const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/repository/tags?per_page=100&page=${page}`);
+                        if (!res.ok) break;
+                        const data = await res.json();
+                        if (!Array.isArray(data) || data.length === 0) break;
+                        tags.push(...data);
+                        const link = res.headers.get('Link') || '';
+                        if (!/<[^>]+>;\s*rel="next"/.test(link)) break;
+                        page++;
+                        if (page > 10) break;
+                    }
+                }
+                renderTagsView(tags);
+            } catch(e) {
+                panel.innerHTML = `<div class="code-loading" style="color:var(--accent)">error: ${e.message}</div>`;
+            }
+        }
+
+        function renderTagsView(tags) {
+            const panel = document.getElementById('code-panel');
+            if (!tags.length) {
+                panel.innerHTML = '<div class="bugs-empty">no tags found</div>';
+                return;
+            }
+            const baseUrl = rv.provider === 'cb'
+                ? `https://codeberg.org/${rv.owner}/${rv.repo}/src/tag/`
+                : rv.provider === 'gh'
+                    ? `https://github.com/${rv.owner}/${rv.repo}/releases/tag/`
+                    : `https://gitlab.com/${rv.owner}/${rv.repo}/-/tags/`;
+            const header = `<div style="padding:1rem 1.25rem;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:0.5rem;">
+                <span style="font-size:0.85rem;font-weight:600;color:var(--fg);">${tags.length.toLocaleString()} tags</span>
+            </div>`;
+            const list = tags.map((t, i) => {
+                const name = t.name || '';
+                const sha = String(t.commit?.sha || t.commit?.id || '').substring(0, 7);
+                const date = t.commit?.created_at || t.commit?.created || '';
+                const dateStr = date ? ` · ${timeAgo(date)}` : '';
+                const badge = i === 0 ? ' <span class="release-latest-badge">Latest</span>' : '';
+                return `<div class="issue-item" style="cursor:default;align-items:flex-start;">
+                    <span class="issue-title" style="display:flex;align-items:center;flex-wrap:wrap;gap:0.3rem;">
+                        <a href="#" data-tag="${escAttr(name)}" onclick="openTag(this.dataset.tag); return false;" style="color:var(--accent);text-decoration:none;font-family:'IBM Plex Mono',monospace;">${escHtml(name)}</a>${badge}
+                    </span>
+                    <span class="issue-meta" style="display:flex;align-items:center;gap:0.35rem;font-family:'IBM Plex Mono',monospace;">
+                        <span>${sha}${dateStr}</span>
+                        <a href="${baseUrl}${escAttr(name)}" target="_blank" rel="noopener" title="open in ${rv.provider}" style="color:var(--fg-muted);text-decoration:none;font-size:0.7rem;">↗</a>
+                    </span>
+                </div>`;
+            }).join('');
+            panel.innerHTML = header + '<div class="commit-list">' + list + '</div>';
+        }
+
+        // Abre el contenido del repo en la ref de un tag (árbol de archivos interno).
+        function openTag(tagName) {
+            if (!tagName) return;
+            rv.branch = tagName;
+            updateStatusbarPath();
+            showView('files');
+        }
+
         let _packagesCache = [];
 
+        async function _githubPackages() {
+            const token = localStorage.getItem('gh_token');
+            const headers = token ? { 'Authorization': `token ${token}` } : {};
+            const res = await fetch(`${getApiBase()}/api/github/packages/${encodeURIComponent(rv.owner)}`, { headers });
+            if (!res.ok) {
+                if (res.status === 401 || res.status === 404) return [];
+                throw new Error(`HTTP ${res.status}`);
+            }
+            return await res.json();
+        }
+
         async function checkPackages() {
             try {
                 let has = false;
@@ -3596,12 +4013,8 @@
                         has = Array.isArray(data) && data.length > 0;
                     }
                 } else if (rv.provider === 'gh') {
-                    let res = await ghFetch(`https://api.github.com/users/${rv.owner}/packages?per_page=100`);
-                    if (res.status === 404) res = await ghFetch(`https://api.github.com/orgs/${rv.owner}/packages?per_page=100`);
-                    if (res.ok) {
-                        const data = await res.json();
-                        has = Array.isArray(data) && data.some(p => p.repository?.name === rv.repo);
-                    }
+                    const data = await _githubPackages();
+                    has = Array.isArray(data) && data.some(p => p.repository?.name === rv.repo);
                 }
                 const nav = document.getElementById('nav-packages');
                 if (nav) nav.style.display = has ? '' : 'none';
@@ -3640,12 +4053,8 @@
                         page++;
                     }
                 } else if (rv.provider === 'gh') {
-                    let res = await ghFetch(`https://api.github.com/users/${rv.owner}/packages?per_page=100`);
-                    if (res.status === 404) res = await ghFetch(`https://api.github.com/orgs/${rv.owner}/packages?per_page=100`);
-                    if (res.ok) {
-                        const data = await res.json();
-                        packages = (data || []).filter(p => p.repository?.name === rv.repo);
-                    }
+                    const data = await _githubPackages();
+                    packages = (data || []).filter(p => p.repository?.name === rv.repo);
                 }
                 _packagesCache = packages;
                 renderPackagesView();
@@ -3751,7 +4160,7 @@
                             ${badges.join(' ')}
                         </div>
                         <span class="release-title">${escHtml(name)}</span>
-                        <span class="release-meta">${author ? escHtml(author) + ' · ' : ''}${dateStr}</span>
+                            <span class="release-meta">${author ? profileLink(author) + ' · ' : ''}${dateStr}</span>
                     </div>
                 </div>`;
             }).join('');
@@ -3810,7 +4219,7 @@
                 <div style="margin-bottom:0.75rem;">
                     <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}</h2>
                     <div style="font-size:0.75rem;color:var(--fg-muted);">
-                        ${author ? 'Published by <strong>' + escHtml(author) + '</strong>' : ''}
+                        ${author ? 'Published by <strong>' + profileLink(author) + '</strong>' : ''}
                         ${dateStr ? ' · ' + dateStr : ''}
                     </div>
                 </div>
@@ -4021,6 +4430,7 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             const shortSha = fullSha.substring(0, 7);
             const msg = commit.commit?.message || commit.message || commit.title || '';
             const author = commit.commit?.author?.name || commit.author_name || commit.author?.login || '';
+            const authorUsername = commit.author?.login || commit.author?.username || '';
             const email = commit.commit?.author?.email || commit.author_email || commit.committer_email || '';
             const avatarUrl = glAvatarUrl || commit.author?.avatar_url || '';
             const initial = (author[0]||'?').toUpperCase();
@@ -4071,7 +4481,7 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     </div>
                     <div class="commit-detail-meta">
                         ${avatarHtml}
-                        <span class="cd-author">${escHtml(author)}</span>
+                        <span class="cd-author">${profileLink(authorUsername, author)}</span>
                         <span class="cd-date">committed ${date}</span>
                         <span class="cd-stats">
                             <span class="add">+${stats.additions || 0}</span>
@@ -4214,7 +4624,7 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                         <div style="margin-bottom:0.75rem;display:flex;gap:0.3rem;flex-wrap:wrap;">${stateBadge}${branchInfo}</div>
                         <div class="issue-detail-meta">
                             ${avatar ? `<img class="issue-detail-avatar" src="${avatar}" alt="${user}" />` : ''}
-                            <strong style="color:var(--fg);">${escHtml(user)}</strong>
+                            <strong style="color:var(--fg);">${profileLink(user)}</strong>
                             <span>opened ${created}</span>
                             <span style="margin-left:auto;"><a class="issue-ext-link" href="${url}" target="_blank" rel="noopener">${rv.owner}/${rv.repo}#${num} <svg xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 24 24">
 	<path d="M0 0h24v24H0z" fill="none" />
@@ -4320,6 +4730,7 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     rv.language = d.language || rv.language;
                     rv.branch = d.default_branch || rv.branch;
                     rv.stars = d.stargazers_count || 0;
+                    setRepoHomepage(d.homepage && d.homepage !== d.html_url ? d.homepage : '');
 
                     const sbDesc = document.getElementById('sb-desc');
                     if (sbDesc) sbDesc.textContent = d.description || '—';
@@ -4336,8 +4747,14 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     if (sbCreated && d.created_at) {
                         sbCreated.textContent = new Date(d.created_at).toLocaleDateString('en', {year:'numeric', month:'short', day:'numeric'});
                     }
+                    const sbForks = document.getElementById('sb-forks');
+                    if (sbForks) sbForks.textContent = d.forks_count ? d.forks_count.toLocaleString() : '0';
+                    const sbWatching = document.getElementById('sb-watching');
+                    if (sbWatching) sbWatching.textContent = d.subscribers_count ? d.subscribers_count.toLocaleString() : '0';
                     const sbLicense = document.getElementById('sb-license');
                     if (sbLicense) sbLicense.textContent = _licenseLabel(d.license && d.license.spdx_id) || '—';
+                    const sbSize = document.getElementById('sb-size');
+                    if (sbSize) sbSize.textContent = d.size ? formatBytes(d.size * 1024) : '—';
                     const sbStarCount = document.getElementById('sb-star-count');
                     if (sbStarCount) sbStarCount.textContent = d.stargazers_count ? d.stargazers_count.toLocaleString() : '';
                     updateStatusbarPath();
@@ -4353,9 +4770,12 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     }
 
                     loadCommitCount();
+                    loadContributors();
+                    loadDeployments();
                 } else if (rv.provider === 'gl') {
                     const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
-                    const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}`);
+                    const glToken = localStorage.getItem('gl_token');
+                    const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}?statistics=true`, glToken ? { headers: { 'PRIVATE-TOKEN': glToken } } : {});
                     if (!res.ok) {
                         const sbDesc = document.getElementById('sb-desc');
                         if (sbDesc) sbDesc.textContent = `gitlab API error ${res.status}`;
@@ -4373,6 +4793,11 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     rv.branch = d.default_branch || rv.branch;
                     rv.stars = d.star_count || 0;
 
+                    // GitLab Pages: el endpoint /pages del proyecto exige autenticación (403 sin token);
+                    // Since we cannot verify if Pages is actually published without authentication,
+                    // and the GitLab API v4 projects endpoint does not include a separate homepage field,
+                    // we do not automatically set a Pages URL to avoid pointing to non-existent sites.
+
                     const sbDesc = document.getElementById('sb-desc');
                     if (sbDesc) sbDesc.textContent = d.description || '—';
                     const sbTags = document.getElementById('sb-tags');
@@ -4389,6 +4814,8 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     if (sbCreated && d.created_at) {
                         sbCreated.textContent = new Date(d.created_at).toLocaleDateString('en', {year:'numeric', month:'short', day:'numeric'});
                     }
+                    const sbForks = document.getElementById('sb-forks');
+                    if (sbForks) sbForks.textContent = d.forks_count ? d.forks_count.toLocaleString() : '0';
                     const sbLicense = document.getElementById('sb-license');
                     if (sbLicense) {
                         try {
@@ -4411,6 +4838,10 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                             }
                         } catch(_) {}
                     }
+                    const sbSize = document.getElementById('sb-size');
+                    if (sbSize) sbSize.textContent = d.statistics && d.statistics.repository_size ? formatBytes(d.statistics.repository_size) : '—';
+                    const sbLfs = document.getElementById('sb-lfs');
+                    if (sbLfs) sbLfs.textContent = d.statistics && d.statistics.lfs_objects_size ? formatBytes(d.statistics.lfs_objects_size) : '—';
                     const sbStarCount = document.getElementById('sb-star-count');
                     if (sbStarCount) sbStarCount.textContent = d.star_count ? d.star_count.toLocaleString() : '';
                     updateStatusbarPath();
@@ -4432,6 +4863,8 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     }
 
                     loadCommitCount();
+                    loadContributors();
+                    loadDeployments();
                 } else if (rv.provider === 'cb') {
                     const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}`);
                     if (!res.ok) {
@@ -4453,6 +4886,7 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     rv.language = d.language || rv.language;
                     rv.branch = d.default_branch || rv.branch;
                     rv.stars = d.stars_count || 0;
+                    setRepoHomepage(d.website);
 
                     const sbDesc = document.getElementById('sb-desc');
                     if (sbDesc) sbDesc.textContent = d.description || '—';
@@ -4469,20 +4903,47 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     if (sbCreated && d.created_at) {
                         sbCreated.textContent = new Date(d.created_at).toLocaleDateString('en', {year:'numeric', month:'short', day:'numeric'});
                     }
+                    const sbForks = document.getElementById('sb-forks');
+                    if (sbForks) sbForks.textContent = d.forks_count ? d.forks_count.toLocaleString() : '0';
+                    const sbWatching = document.getElementById('sb-watching');
+                    if (sbWatching) {
+                        try {
+                            // Gitea/Codeberg no incluye el conteo de watchers en el JSON del repo:
+                            // se obtiene del header de paginación X-Total-Count de /subscribers.
+                            const wRes = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/subscribers?limit=1`);
+                            if (wRes.ok) {
+                                const total = wRes.headers.get('X-Total-Count');
+                                if (total != null) sbWatching.textContent = Number(total).toLocaleString();
+                            }
+                        } catch(_) {}
+                    }
                     const sbLicense = document.getElementById('sb-license');
                     if (sbLicense) {
                         const ref = currentBranch() || rv.branch || 'master';
-                        const licNames = ['LICENSE', 'LICENSE.md', 'LICENSE.txt', 'COPYING', 'COPYING.md'];
-                        for (const licName of licNames) {
-                            try {
-                                const licRes = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/raw/${encodeURIComponent(licName)}?ref=${encodeURIComponent(ref)}`);
-                                if (licRes.ok) {
-                                    const label = _detectLicense(await licRes.text());
-                                    if (label) { sbLicense.textContent = label; break; }
+                        try {
+                            // El proxy de Codeberg bloquea /raw/<file>?ref= (403): se lista la raíz
+                            // con /contents (1 request) y se lee el archivo de licencia real (1 request),
+                            // en vez de probar hasta 5 nombres con rutas no permitidas.
+                            const listRes = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/contents/?ref=${encodeURIComponent(ref)}`);
+                            if (listRes.ok) {
+                                const items = await listRes.json();
+                                const licItem = Array.isArray(items)
+                                    ? items.find(f => f && f.type === 'file' && /^(LICENSE|COPYING)(\.(md|txt))?$/i.test(f.name || ''))
+                                    : null;
+                                if (licItem) {
+                                    const licPath = (licItem.path || '').split('/').map(encodeURIComponent).join('/');
+                                    const licRes = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/contents/${licPath}?ref=${encodeURIComponent(ref)}`);
+                                    if (licRes.ok) {
+                                        const data = await licRes.json();
+                                        const label = _detectLicense(decodeBase64Utf8(data.content || ''));
+                                        if (label) sbLicense.textContent = label;
+                                    }
                                 }
-                            } catch(_) {}
-                        }
+                            }
+                        } catch(_) {}
                     }
+                    const sbSize = document.getElementById('sb-size');
+                    if (sbSize) sbSize.textContent = d.size ? formatBytes(d.size * 1024) : '—';
                     const sbStarCount = document.getElementById('sb-star-count');
                     if (sbStarCount) sbStarCount.textContent = d.stars_count ? d.stars_count.toLocaleString() : '';
                     updateStatusbarPath();
@@ -4493,11 +4954,475 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     }
 
                     loadCommitCount();
+                    loadContributors();
                 }
             } catch(e) {
                 const sbDesc = document.getElementById('sb-desc');
                 if (sbDesc) sbDesc.textContent = `error: ${e.message}`;
             }
+            _checkSecurityPolicy();
+        }
+
+        let _securityFile = null;
+
+        // Muestra el botón "Security Policy" en el sidebar derecho solo si el repo
+        // tiene un archivo de seguridad en la raíz (SECURITY.md o security.md).
+        async function _checkSecurityPolicy() {
+            const btn = document.getElementById('sb-security-btn');
+            if (!btn) return;
+            try {
+                const items = await _fetchDirItems([]);
+                const item = Array.isArray(items)
+                    ? items.find(f => f && f.type === 'file' && /^SECURITY\.(md|markdown|txt)$/i.test(f.name || ''))
+                    : null;
+                if (item) {
+                    _securityFile = item;
+                    btn.style.display = '';
+                }
+            } catch(_) {}
+        }
+
+        function openSecurityPolicy() {
+            if (!_securityFile) return;
+            loadFile(_securityFile);
+        }
+
+        function setRepoHomepage(url) {
+            const row = document.getElementById('sb-home-row');
+            const link = document.getElementById('sb-home-link');
+            if (!row || !link) return;
+            const safe = sanitizeHttpUrl(String(url || '').trim());
+            if (!safe) {
+                row.style.display = 'none';
+                return;
+            }
+            const label = safe.replace(/^https?:\/\//, '').replace(/\/$/, '');
+            link.href = safe;
+            link.title = safe;
+            const span = link.querySelector('span');
+            if (span) span.textContent = label;
+            row.style.display = '';
+        }
+
+        // GitLab /repository/contributors no incluye el username (solo name/email).
+        // Se resuelve desde los commits recientes (author.username) y, como fallback,
+        // por email vía el proxy existente gl-avatar (que también devuelve username).
+        async function _glContributorUsernames(list) {
+            const map = new Map();
+            if (!Array.isArray(list) || list.length === 0) return map;
+            try {
+                const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/repository/commits?per_page=100`);
+                if (res.ok) {
+                    const commits = await res.json();
+                    if (Array.isArray(commits)) {
+                        commits.forEach(c => {
+                            const email = c.author_email || (c.commit && c.commit.author && c.commit.author.email) || '';
+                            if (email && c.author && c.author.username) map.set(email, c.author.username);
+                        });
+                    }
+                }
+            } catch(_) {}
+            const missing = [...new Set(list.map(c => c && c.email).filter(Boolean))].filter(e => !map.has(e)).slice(0, 50);
+            await Promise.all(missing.map(async email => {
+                try {
+                    const res = await fetch(`${API_BASE}/api/gl-avatar?email=${encodeURIComponent(email)}`);
+                    if (res.ok) {
+                        const data = await res.json();
+                        if (data && data.username) map.set(email, data.username);
+                    }
+                } catch(_) {}
+            }));
+            return map;
+        }
+
+        // Codeberg/Forgejo no expone /stats/contributors (404 verificado): los
+        // contribuidores se agregan desde los commits recientes (cada commit trae
+        // author.login, full_name y avatar_url), agrupando por autor y contando
+        // commits como aportes. Devuelve el mismo shape {author, total} que
+        // normaliza _cbContributorStats.
+        async function _cbContributorsFromCommits(maxAuthors, maxPages) {
+            const stats = [];
+            const byLogin = new Map();
+            for (let page = 1; page <= maxPages; page++) {
+                const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/commits?limit=50&page=${page}`);
+                if (!res.ok) break;
+                const data = await res.json();
+                if (!Array.isArray(data) || data.length === 0) break;
+                for (const c of data) {
+                    const a = c && c.author;
+                    if (!a || !a.login) continue;
+                    let s = byLogin.get(a.login);
+                    if (!s) {
+                        s = { author: a, total: 0 };
+                        byLogin.set(a.login, s);
+                        stats.push(s);
+                    }
+                    s.total++;
+                }
+                if (maxAuthors && stats.length >= maxAuthors) break;
+            }
+            return stats;
+        }
+
+        // Normaliza {author, total} al shape común de contribuidores
+        // (login, name, contributions, avatar_url) para reutilizar el render.
+        function _cbContributorStats(list) {
+            if (!Array.isArray(list)) return [];
+            return list.map(s => {
+                const a = (s && s.author) || {};
+                return {
+                    login: a.login || '',
+                    name: a.full_name || a.login || '',
+                    contributions: s.total || 0,
+                    avatar_url: a.avatar_url || '',
+                };
+            }).filter(c => c.login);
+        }
+
+        async function loadContributors() {
+            const section = document.getElementById('sb-contributors-section');
+            const box = document.getElementById('sb-contributors');
+            if (!section || !box) return;
+            let list = [];
+            let cbTotal = 0;
+            try {
+                if (rv.provider === 'gh') {
+                    const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/contributors?per_page=10`);
+                    if (res.ok) list = await res.json();
+                } else if (rv.provider === 'gl') {
+                    const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                    const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/repository/contributors?per_page=10`);
+                    if (res.ok) list = await res.json();
+                } else if (rv.provider === 'cb') {
+                    // Se agregan autores desde los commits recientes; el conteo es el
+                    // de autores únicos encontrados (límite para el rate limit).
+                    const stats = await _cbContributorsFromCommits(50, 5);
+                    cbTotal = stats.length;
+                    list = _cbContributorStats(stats).slice(0, 10);
+                }
+            } catch(_) {}
+            if (!Array.isArray(list) || list.length === 0) return;
+            // GitLab no incluye el username en /contributors: se resuelve por email
+            // con el mismo patrón que loadCommits (commits recientes + gl-avatar).
+            const userMap = rv.provider === 'gl' ? await _glContributorUsernames(list) : new Map();
+            const html = list.map(c => {
+                if (!c) return '';
+                const name = c.login || c.name || '';
+                // username real solo si viene del login del repo o del mapa por email;
+                // si no se resolvió (GitLab sin token) se muestra el nombre sin enlace.
+                const login = c.login || userMap.get(c.email) || '';
+                const username = login || name;
+                const commits = c.contributions || c.commits || 0;
+                // GitLab no devuelve avatar: se usa gravatar a partir del email (patrón existente).
+                const avatar = c.avatar_url || (c.email ? `https://www.gravatar.com/avatar/${md5(String(c.email).trim().toLowerCase())}?s=56&d=identicon` : '');
+                if (!username || !avatar) return '';
+                const img = `<img src="${escAttr(avatar)}" alt="${escAttr(username)}" loading="lazy">`;
+                const title = `${escAttr(username)} · ${commits} commits`;
+                if (!login) return `<span class="sb-contributor" title="${title}">${img}</span>`;
+                return `<a class="sb-contributor" href="/${rv.provider}/${encodeURIComponent(login)}" title="${title}">${img}</a>`;
+            }).join('');
+            if (!html) return;
+            box.innerHTML = html;
+            section.style.display = '';
+            // conteo total para el enlace "View all contributors"
+            const countEl = document.getElementById('sb-contributors-count');
+            if (countEl) {
+                try {
+                    if (rv.provider === 'gh') {
+                        const cRes = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/contributors?per_page=1`);
+                        if (cRes.ok) {
+                            const m = (cRes.headers.get('Link') || '').match(/&page=(\d+)>;\s*rel="last"/);
+                            if (m) countEl.textContent = parseInt(m[1]).toLocaleString();
+                        }
+                    } else if (rv.provider === 'gl') {
+                        const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                        const cRes = await fetch(`https://gitlab.com/api/v4/projects/${enc}/repository/contributors?per_page=1`);
+                        if (cRes.ok) {
+                            const xTotal = cRes.headers.get('X-Total');
+                            if (xTotal) countEl.textContent = parseInt(xTotal).toLocaleString();
+                        }
+                    } else if (rv.provider === 'cb') {
+                        if (cbTotal) countEl.textContent = cbTotal.toLocaleString();
+                    }
+                } catch(_) {}
+            }
+        }
+
+        async function loadContributorsView() {
+            const panel = document.getElementById('code-panel');
+            panel.innerHTML = '<div class="code-loading">loading contributors...</div>';
+            try {
+                let list = [];
+                if (rv.provider === 'gh') {
+                    let page = 1;
+                    while (true) {
+                        const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/contributors?per_page=100&page=${page}`);
+                        if (!res.ok) break;
+                        const data = await res.json();
+                        if (!Array.isArray(data) || data.length === 0) break;
+                        list.push(...data);
+                        const link = res.headers.get('Link') || '';
+                        if (!/<[^>]+>;\s*rel="next"/.test(link)) break;
+                        page++;
+                        if (page > 10) break;
+                    }
+                } else if (rv.provider === 'gl') {
+                    const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                    let page = 1;
+                    while (true) {
+                        const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/repository/contributors?per_page=100&page=${page}`);
+                        if (!res.ok) break;
+                        const data = await res.json();
+                        if (!Array.isArray(data) || data.length === 0) break;
+                        list.push(...data);
+                        const link = res.headers.get('Link') || '';
+                        if (!/<[^>]+>;\s*rel="next"/.test(link)) break;
+                        page++;
+                        if (page > 10) break;
+                    }
+                } else if (rv.provider === 'cb') {
+                    // Vista completa: más páginas de commits para cubrir más autores.
+                    const stats = await _cbContributorsFromCommits(200, 20);
+                    list = _cbContributorStats(stats);
+                }
+                const userMap = rv.provider === 'gl' ? await _glContributorUsernames(list) : new Map();
+                renderContributorsView(list, userMap);
+            } catch(e) {
+                panel.innerHTML = `<div class="code-loading" style="color:var(--accent)">error: ${e.message}</div>`;
+            }
+        }
+
+        function renderContributorsView(list, userMap) {
+            userMap = userMap || new Map();
+            const panel = document.getElementById('code-panel');
+            if (!list.length) {
+                panel.innerHTML = '<div class="bugs-empty">no contributors found</div>';
+                return;
+            }
+            const count = list.length;
+            const header = `<div style="padding:1rem 1.25rem;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:0.5rem;">
+                <span style="font-size:0.85rem;font-weight:600;color:var(--fg);">${count} contributor${count !== 1 ? 's' : ''}</span>
+            </div>`;
+            const body = list.map(c => {
+                if (!c) return '';
+                const name = c.login || c.name || '';
+                // username real solo si viene del login del repo o del mapa por email;
+                // si no se resolvió (GitLab sin token) se muestra el nombre sin enlace.
+                const login = c.login || userMap.get(c.email) || '';
+                const username = login || name;
+                const commits = c.contributions || c.commits || 0;
+                // GitLab no devuelve avatar: se usa gravatar a partir del email (patrón existente).
+                const avatar = c.avatar_url || (c.email ? `https://www.gravatar.com/avatar/${md5(String(c.email).trim().toLowerCase())}?s=56&d=identicon` : '');
+                const img = avatar
+                    ? `<img src="${escAttr(avatar)}" alt="${escAttr(username)}" loading="lazy" style="width:2rem;height:2rem;border-radius:50%;object-fit:cover;background:var(--accent);flex:none;">`
+                    : `<span style="width:2rem;height:2rem;border-radius:50%;background:var(--accent);display:inline-flex;align-items:center;justify-content:center;font-size:0.7rem;color:#fff;flex:none;">${escHtml((username || '?')[0].toUpperCase())}</span>`;
+                const avatarHtml = login
+                    ? `<a href="/${rv.provider}/${encodeURIComponent(login)}" aria-label="${escAttr(username)} profile">${img}</a>`
+                    : img;
+                const nameHtml = login
+                    ? `<a href="/${rv.provider}/${encodeURIComponent(login)}" style="color:var(--fg);text-decoration:none;font-weight:500;">${escHtml(username)}</a>`
+                    : `<span style="color:var(--fg);font-weight:500;">${escHtml(username)}</span>`;
+                return `<div class="release-item">
+                    <div style="display:flex;align-items:center;gap:0.75rem;min-width:0;flex:1;">
+                        ${avatarHtml}
+                        <div style="display:flex;flex-direction:column;gap:0.15rem;min-width:0;flex:1;">
+                            ${nameHtml}
+                            <span class="release-meta">${commits} commit${commits !== 1 ? 's' : ''}</span>
+                        </div>
+                    </div>
+                </div>`;
+            }).join('');
+            panel.innerHTML = header + `<div class="release-list">${body}</div>`;
+        }
+
+        function _deployStatusCls(status) {
+            const s = String(status || '').toLowerCase();
+            if (s === 'success' || s === 'created' || s === 'manual') return 'success';
+            if (s === 'failed' || s === 'error' || s === 'failure' || s === 'canceled' || s === 'cancelled' || s === 'blocked') return 'failed';
+            if (s === 'running' || s === 'in_progress' || s === 'pending' || s === 'queued') return 'running';
+            return 'pending';
+        }
+
+        async function loadDeployments() {
+            const section = document.getElementById('sb-deployments-section');
+            const box = document.getElementById('sb-deployments');
+            if (!section || !box) return;
+            // Codeberg/Gitea no expone un endpoint público de deployments; GitHub lo expone
+            // públicamente y GitLab solo responde con token: la sección se carga cuando puede funcionar.
+            if (rv.provider === 'cb') return;
+            if (rv.provider === 'gl' && !localStorage.getItem('gl_token')) return;
+            let items = [];
+            let total = 0;
+            try {
+                if (rv.provider === 'gh') {
+                    const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/deployments?per_page=1`);
+                    if (res.ok) {
+                        const deploys = await res.json();
+                        if (Array.isArray(deploys)) {
+                            // El estado de cada deployment vive en un endpoint aparte: se consulta en paralelo.
+                            const statuses = await Promise.all(deploys.map(async d => {
+                                if (!d || !d.statuses_url) return '';
+                                try {
+                                    const sRes = await ghFetch(d.statuses_url);
+                                    if (sRes.ok) {
+                                        const list = await sRes.json();
+                                        return Array.isArray(list) && list.length > 0 ? list[0].state : '';
+                                    }
+                                } catch(_) {}
+                                return '';
+                            }));
+                            items = deploys.map((d, i) => ({
+                                env: d.environment || '',
+                                ref: d.ref || '',
+                                created_at: d.created_at || '',
+                                status: statuses[i] || '',
+                                description: d.description || ''
+                            }));
+                            const m = (res.headers.get('Link') || '').match(/&page=(\d+)>;\s*rel="last"/);
+                            total = m ? parseInt(m[1]) : deploys.length;
+                        }
+                    }
+                } else if (rv.provider === 'gl') {
+                    const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                    const glToken = localStorage.getItem('gl_token');
+                    const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/deployments?per_page=1`, glToken ? { headers: { 'PRIVATE-TOKEN': glToken } } : {});
+                    if (res.ok) {
+                        const deploys = await res.json();
+                        if (Array.isArray(deploys)) {
+                            items = deploys.map(d => ({
+                                env: d.environment && d.environment.name ? d.environment.name : '',
+                                ref: d.ref || '',
+                                created_at: d.created_at || '',
+                                status: d.status || ''
+                            }));
+                            const xTotal = res.headers.get('X-Total');
+                            total = xTotal ? parseInt(xTotal) : deploys.length;
+                        }
+                    }
+                }
+            } catch(_) {}
+            if (items.length === 0) return;
+            const html = items.map(d => {
+                const env = escHtml(d.env || 'default');
+                const ref = escHtml(d.ref || '');
+                const time = d.created_at ? timeAgo(d.created_at) : '';
+                const status = escHtml(d.status || '');
+                const head = `<span class="sb-deploy-env" title="${escAttr(d.description || d.env || '')}">${env}</span>` +
+                    (status ? `<span class="sb-deploy-status ${_deployStatusCls(d.status)}">${status}</span>` : '');
+                const meta = [ref, time].filter(Boolean).join(' · ');
+                return `<div class="sb-deploy"><div class="sb-deploy-head">${head}</div>` +
+                    (meta ? `<div class="sb-deploy-meta">${meta}</div>` : '') + `</div>`;
+            }).join('');
+            if (!html) return;
+            box.innerHTML = html;
+            section.style.display = '';
+            // conteo total para el enlace "View all deployments" (headers del mismo response)
+            const countEl = document.getElementById('sb-deployments-count');
+            if (countEl && total > 0) countEl.textContent = total.toLocaleString();
+        }
+
+        async function loadDeploymentsView() {
+            const panel = document.getElementById('code-panel');
+            panel.innerHTML = '<div class="code-loading">loading deployments...</div>';
+            // Igual que en el sidebar: Codeberg no expone deployments; GitLab exige token.
+            if (rv.provider === 'cb') {
+                panel.innerHTML = '<div class="bugs-empty">deployments are not available on codeberg</div>';
+                return;
+            }
+            if (rv.provider === 'gl' && !localStorage.getItem('gl_token')) {
+                panel.innerHTML = '<div class="bugs-empty">deployments require a gitlab token</div>';
+                return;
+            }
+            try {
+                let items = [];
+                if (rv.provider === 'gh') {
+                    let page = 1;
+                    while (true) {
+                        const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/deployments?per_page=100&page=${page}`);
+                        if (!res.ok) break;
+                        const data = await res.json();
+                        if (!Array.isArray(data) || data.length === 0) break;
+                        items.push(...data);
+                        const link = res.headers.get('Link') || '';
+                        if (!/<[^>]+>;\s*rel="next"/.test(link)) break;
+                        page++;
+                        if (page > 10) break;
+                    }
+                    // Resolve deployment statuses from statuses_url
+                    const statuses = await Promise.all(items.map(async d => {
+                        if (!d || !d.statuses_url) return '';
+                        try {
+                            const sRes = await ghFetch(d.statuses_url);
+                            if (sRes.ok) {
+                                const list = await sRes.json();
+                                return Array.isArray(list) && list.length > 0 ? list[0].state : '';
+                            }
+                        } catch(_) {}
+                        return '';
+                    }));
+                    items = items.map((d, i) => ({
+                        env: d.environment || '',
+                        ref: d.ref || '',
+                        created_at: d.created_at || '',
+                        status: statuses[i] || '',
+                        description: d.description || ''
+                    }));
+                } else if (rv.provider === 'gl') {
+                    const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                    const glToken = localStorage.getItem('gl_token');
+                    let page = 1;
+                    while (true) {
+                        const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/deployments?per_page=100&page=${page}`, glToken ? { headers: { 'PRIVATE-TOKEN': glToken } } : {});
+                        if (!res.ok) break;
+                        const data = await res.json();
+                        if (!Array.isArray(data) || data.length === 0) break;
+                        items.push(...data);
+                        const link = res.headers.get('Link') || '';
+                        if (!/<[^>]+>;\s*rel="next"/.test(link)) break;
+                        page++;
+                        if (page > 10) break;
+                    }
+                    items = items.map(d => ({
+                        env: d.environment && d.environment.name ? d.environment.name : '',
+                        ref: d.ref || '',
+                        created_at: d.created_at || '',
+                        status: d.status || ''
+                    }));
+                }
+                // Codeberg/Gitea no expone un endpoint público de deployments.
+                renderDeploymentsView(items);
+            } catch(e) {
+                panel.innerHTML = `<div class="code-loading" style="color:var(--accent)">error: ${e.message}</div>`;
+            }
+        }
+
+        function renderDeploymentsView(items) {
+            const panel = document.getElementById('code-panel');
+            if (!items.length) {
+                panel.innerHTML = '<div class="bugs-empty">no deployments found</div>';
+                return;
+            }
+            const count = items.length;
+            const header = `<div style="padding:1rem 1.25rem;border-bottom:1px solid var(--border);display:flex;align-items:center;gap:0.5rem;">
+                <span style="font-size:0.85rem;font-weight:600;color:var(--fg);">${count} deployment${count !== 1 ? 's' : ''}</span>
+            </div>`;
+            const list = items.map(d => {
+                const env = escHtml(d.env || 'default');
+                const ref = escHtml(d.ref || '');
+                const date = d.created_at ? new Date(d.created_at).toLocaleDateString('en', {month:'short', day:'numeric', year:'numeric'}) : '';
+                const status = escHtml(d.status || '');
+                return `<div class="release-item">
+                    <div style="display:flex;flex-direction:column;gap:0.25rem;min-width:0;flex:1;">
+                        <div style="display:flex;align-items:center;gap:0.4rem;flex-wrap:wrap;">
+                            <span class="sb-deploy-env">${env}</span>
+                            ${status ? `<span class="sb-deploy-status ${_deployStatusCls(d.status)}">${status}</span>` : ''}
+                        </div>
+                        <span class="release-meta">${ref ? escHtml(ref) + ' · ' : ''}${date}</span>
+                    </div>
+                </div>`;
+            }).join('');
+            panel.innerHTML = header + `<div class="release-list">${list}</div>`;
         }
 
         async function loadCommitCount() {
@@ -4622,6 +5547,72 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             } catch(_) {}
         }
 
+        async function loadTagCount() {
+            const el = document.getElementById('sb-tags-count');
+            const section = document.getElementById('sb-tags-section');
+            const listEl = document.getElementById('sb-tags-list');
+            if (!el) return;
+            try {
+                let tags = [];
+                let total = 0;
+                if (rv.provider === 'gh') {
+                    const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/tags?per_page=100`);
+                    if (!res.ok) { if (section) section.style.display = 'none'; return; }
+                    const data = await res.json();
+                    tags = Array.isArray(data) ? data : [];
+                    // GitHub no expone el total de tags: se consulta la última página para un total exacto.
+                    const link = res.headers.get('Link') || '';
+                    const match = link.match(/&page=(\d+)>; rel="last"/);
+                    if (match) {
+                        const lastPage = parseInt(match[1]);
+                        try {
+                            const lastRes = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/tags?per_page=100&page=${lastPage}`);
+                            const lastData = lastRes.ok ? await lastRes.json() : [];
+                            total = (lastPage - 1) * 100 + (Array.isArray(lastData) ? lastData.length : 0);
+                        } catch(_) {
+                            total = lastPage * 100;
+                        }
+                    } else {
+                        total = tags.length;
+                    }
+                } else if (rv.provider === 'gl') {
+                    const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                    const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/repository/tags?per_page=100`);
+                    if (!res.ok) { if (section) section.style.display = 'none'; return; }
+                    const data = await res.json();
+                    tags = Array.isArray(data) ? data : [];
+                    const xTotal = res.headers.get('X-Total');
+                    total = xTotal ? parseInt(xTotal) : tags.length;
+                } else if (rv.provider === 'cb') {
+                    const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/tags?limit=50`);
+                    if (!res.ok) { if (section) section.style.display = 'none'; return; }
+                    const data = await res.json();
+                    tags = Array.isArray(data) ? data : [];
+                    const xTotal = res.headers.get('X-Total-Count');
+                    total = xTotal ? parseInt(xTotal) : tags.length;
+                }
+                if (tags.length > 0) {
+                    el.textContent = total.toLocaleString();
+                    if (listEl) {
+                        // La última tag (más reciente) se muestra destacada, como Latest en Releases.
+                        const latestName = tags[0].name || '';
+                        const latestHtml = `<a href="#" data-tag="${escAttr(latestName)}" onclick="openTag(this.dataset.tag); return false;" style="display:block;padding:0.3rem 0;color:var(--fg);text-decoration:none;">
+                            <div style="font-size:0.82rem;font-weight:500;line-height:1.3;font-family:'IBM Plex Mono',monospace;">${escHtml(latestName)} <span class="release-latest-badge">Latest</span></div>
+                        </a>`;
+                        const restHtml = tags.slice(1, 10).map(t => {
+                            const name = t.name || '';
+                            return `<a href="#" data-tag="${escAttr(name)}" onclick="openTag(this.dataset.tag); return false;" style="display:block;padding:0.15rem 0;color:var(--accent);text-decoration:none;font-family:'IBM Plex Mono',monospace;font-size:0.75rem;">${escHtml(name)}</a>`;
+                        }).join('');
+                        listEl.innerHTML = latestHtml + restHtml;
+                    }
+                    if (section) section.style.display = '';
+                } else {
+                    el.textContent = '';
+                    if (section) section.style.display = 'none';
+                }
+            } catch(_) {}
+        }
+
         let languageColors = {};
         const LANGUAGE_COLORS_CACHE_KEY = 'gg_language_colors';
         const LANGUAGE_COLORS_CACHE_TTL = 24 * 60 * 60 * 1000;
@@ -4829,6 +5820,155 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             }
         }
 
+        const _fileTreeSearch = `<div class="repo-search">
+            <input class="repo-search-input" id="repo-search-input" type="search" placeholder="search files or code" aria-label="Search repository" autocomplete="off" onkeydown="if(event.key==='Enter') searchRepository('files')">
+            <div class="repo-search-actions">
+                <button class="repo-search-btn" type="button" onclick="searchRepository('files')">Files</button>
+                <button class="repo-search-btn" type="button" onclick="searchRepository('code')">Code</button>
+            </div>
+        </div>`;
+        function _fileTreeShell(content) { return _fileTreeSearch + content; }
+
+        // Shell inicial del árbol: el buscador vive solo en _fileTreeSearch, sin copia duplicada.
+        const _fileTreeEl = document.getElementById('file-tree');
+        if (_fileTreeEl && !_fileTreeEl.childElementCount) {
+            _fileTreeEl.innerHTML = _fileTreeShell('<div class="tree-loading">loading...</div>');
+        }
+
+        function _searchItem(name, path, extra) {
+            return { name: name || String(path || '').split('/').pop(), path: path || name, type: 'file', ...(extra || {}) };
+        }
+
+        async function _allRepositoryFiles() {
+            const ref = currentBranch();
+            if (rv.provider === 'gh') {
+                const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/git/trees/${encodeURIComponent(ref)}?recursive=1`);
+                if (!res.ok) throw new Error(`HTTP ${res.status}`);
+                const data = await res.json();
+                return (data.tree || []).filter(i => i.type === 'blob').map(i => _searchItem('', i.path, { size: i.size }));
+            }
+            if (rv.provider === 'cb') {
+                const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/git/trees/${encodeURIComponent(ref)}?recursive=true`);
+                if (!res.ok) throw new Error(`HTTP ${res.status}`);
+                const data = await res.json();
+                return (data.tree || []).filter(i => i.type === 'blob').map(i => _searchItem('', i.path, { size: i.size }));
+            }
+            const project = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+            const files = [];
+            for (let page = 1; page <= 10; page++) {
+                const res = await fetch(`https://gitlab.com/api/v4/projects/${project}/repository/tree?recursive=true&per_page=100&page=${page}&ref=${encodeURIComponent(ref)}`);
+                if (!res.ok) throw new Error(`HTTP ${res.status}`);
+                const pageItems = await res.json();
+                files.push(...pageItems.filter(i => i.type === 'blob').map(i => _searchItem(i.name, i.path)));
+                if (!res.headers.get('x-next-page')) break;
+            }
+            return files;
+        }
+
+        let _codeSearchSubsetNote = false;
+
+        async function _providerCodeSearch(query) {
+            if (rv.provider === 'gh') {
+                const token = localStorage.getItem('gh_token');
+                const headers = token ? { 'Authorization': `token ${token}` } : {};
+                const url = `${getApiBase()}/api/code/search?q=${encodeURIComponent(query)}&owner=${encodeURIComponent(rv.owner)}&repo=${encodeURIComponent(rv.repo)}&provider=gh`;
+                const res = await fetch(url, { headers });
+                if (!res.ok) throw new Error(res.status === 401 ? 'Code search is not configured on the server.' : `HTTP ${res.status}`);
+                const data = await res.json();
+                return (data.results || []).map(i => _searchItem(i.name, i.path));
+            }
+            if (rv.provider === 'gl') {
+                const project = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                const res = await fetch(`https://gitlab.com/api/v4/projects/${project}/search?scope=blobs&search=${encodeURIComponent(query)}&ref=${encodeURIComponent(currentBranch())}`);
+                if (!res.ok) throw new Error(`HTTP ${res.status}`);
+                const data = await res.json();
+                return (data || []).map(i => _searchItem(i.filename, i.path || i.filename));
+            }
+            // Forgejo's public API has no repository-scoped code search. Search file contents
+            // client-side in a bounded set to keep the page responsive on large repositories.
+            _codeSearchSubsetNote = false;
+            const binary = /\.(?:7z|avif|bin|bmp|class|dll|exe|gif|gz|ico|jar|jpe?g|mp3|mp4|otf|pdf|png|so|tar|ttf|webm|woff2?|zip)$/i;
+            const maxFileSize = 1024 * 1024; // 1 MiB: archivos más grandes se descartan antes de fetchear.
+            const maxCandidates = 100;
+            const allFiles = await _allRepositoryFiles();
+            const eligible = allFiles.filter(i => !binary.test(i.path) && (!i.size || i.size <= maxFileSize));
+            const candidates = eligible.slice(0, maxCandidates);
+            _codeSearchSubsetNote = eligible.length > candidates.length;
+            const needle = query.toLowerCase();
+            const matches = [];
+            for (let start = 0; start < candidates.length; start += 8) {
+                const batch = await Promise.all(candidates.slice(start, start + 8).map(async item => {
+                    try {
+                        const path = item.path.split('/').map(encodeURIComponent).join('/');
+                        const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/contents/${path}?ref=${encodeURIComponent(currentBranch())}`);
+                        if (!res.ok) return null;
+                        const data = await res.json();
+                        return decodeBase64Utf8(data.content || '').toLowerCase().includes(needle) ? item : null;
+                    } catch (_) { return null; }
+                }));
+                matches.push(...batch.filter(Boolean));
+                if (matches.length >= 100) break;
+            }
+            return matches;
+        }
+
+        function _renderSearchResults(query, mode, items) {
+            const panel = document.getElementById('code-panel');
+            const label = mode === 'code' ? 'code results' : 'file results';
+            panel.innerHTML = '';
+            const wrap = document.createElement('div');
+            wrap.className = 'search-results';
+            const heading = document.createElement('h2');
+            heading.textContent = `${items.length} ${label} for “${query}”`;
+            wrap.appendChild(heading);
+            if (mode === 'code' && _codeSearchSubsetNote) {
+                const note = document.createElement('div');
+                note.className = 'code-loading';
+                note.textContent = 'showing results from a subset of this repository';
+                wrap.appendChild(note);
+            }
+            if (!items.length) {
+                const empty = document.createElement('div');
+                empty.className = 'code-loading';
+                empty.textContent = 'no matches found';
+                wrap.appendChild(empty);
+            }
+            items.slice(0, 100).forEach(item => {
+                const button = document.createElement('button');
+                button.className = 'search-result';
+                button.type = 'button';
+                const path = document.createElement('span');
+                path.className = 'search-result-path';
+                path.textContent = item.path || item.name;
+                button.appendChild(path);
+                if (mode === 'code') {
+                    const note = document.createElement('span');
+                    note.className = 'search-result-note';
+                    note.textContent = 'open file';
+                    button.appendChild(note);
+                }
+                button.onclick = () => loadFile(item);
+                wrap.appendChild(button);
+            });
+            panel.appendChild(wrap);
+        }
+
+        async function searchRepository(mode) {
+            const input = document.getElementById('repo-search-input');
+            const query = (input && input.value || '').trim();
+            if (!query) { input && input.focus(); return; }
+            const panel = document.getElementById('code-panel');
+            panel.innerHTML = '<div class="code-loading">searching repository...</div>';
+            try {
+                const items = mode === 'code'
+                    ? await _providerCodeSearch(query)
+                    : (await _allRepositoryFiles()).filter(i => i.path.toLowerCase().includes(query.toLowerCase()));
+                _renderSearchResults(query, mode, items);
+            } catch (e) {
+                panel.innerHTML = `<div class="code-loading" style="color:var(--accent)">search error: ${escHtml(e.message || String(e))}</div>`;
+            }
+        }
+
         function _sortItems(items) {
             return items.slice().sort((a, b) => {
                 const ad = a.type === 'dir' || a.type === 'tree';
@@ -4908,12 +6048,12 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             rv.path = pathParts;
             updateBreadcrumb();
             const tree = document.getElementById('file-tree');
-            tree.innerHTML = '<div class="tree-loading">loading...</div>';
+            tree.innerHTML = _fileTreeShell('<div class="tree-loading">loading...</div>');
             _treeActiveEl = null;
 
             try {
                 const items = await _fetchDirItems(pathParts);
-                tree.innerHTML = '';
+                tree.innerHTML = _fileTreeShell('');
 
                 _sortItems(items).forEach(item => {
                     tree.appendChild(_buildTreeNode(item, pathParts, 0));
@@ -4927,11 +6067,12 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     document.getElementById('code-panel').innerHTML = '<div class="code-loading">select a file</div>';
                 }
             } catch(e) {
-                tree.innerHTML = `<div class="tree-loading" style="color:var(--accent)">error: ${e.message}</div>`;
+                tree.innerHTML = _fileTreeShell(`<div class="tree-loading" style="color:var(--accent)">${escHtml(e.message || String(e))}</div>`);
             }
         }
 
-        async function loadFile(item) {
+        async function loadFile(item, opts) {
+            opts = opts || {};
             const panel = document.getElementById('code-panel');
             panel.innerHTML = '<div class="code-loading">loading file...</div>';
             try {
@@ -4943,7 +6084,9 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                         if (!res.ok) throw new Error(`HTTP ${res.status}`);
                         content = await res.text();
                     } else {
-                        const res = await fetch(item.url);
+                        const path = (item.path || item.name || '').split('/').map(encodeURIComponent).join('/');
+                        const url = item.url || `https://api.github.com/repos/${rv.owner}/${rv.repo}/contents/${path}?ref=${encodeURIComponent(currentBranch())}`;
+                        const res = await ghFetch(url);
                         if (!res.ok) throw new Error(`HTTP ${res.status}`);
                         const data = await res.json();
                         content = decodeBase64Utf8(data.content);
@@ -4980,7 +6123,7 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                             : `${getApiBase()}/api/cb-proxy/${rv.owner}/${rv.repo}/${item.path}`;
                     }
                     const safeImgUrl = sanitizeHttpUrl(imgUrl);
-                    _renderFilePanel(name, { content, size: fileSize, imgUrl: safeImgUrl, isImage: true, previewHtml: `<div style="padding:1rem;text-align:center;"><img src="${escHtml(safeImgUrl)}" alt="${escHtml(name)}" style="max-width:100%;max-height:80vh;object-fit:contain;border-radius:4px;" /></div>` });
+                    _renderFilePanel(name, { path: item.path || item.name, lastCommitScope: opts.lastCommitScope || 'file', content, size: fileSize, imgUrl: safeImgUrl, isImage: true, previewHtml: `<div style="padding:1rem;text-align:center;"><img src="${escHtml(safeImgUrl)}" alt="${escHtml(name)}" style="max-width:100%;max-height:80vh;object-fit:contain;border-radius:4px;" /></div>` });
                 } else if (name.toLowerCase().endsWith('.md')) {
                     const dir = item.path ? item.path.substring(0, item.path.lastIndexOf('/') + 1) : '';
                     let mdBaseUrl = `https://gitlab.com/${rv.owner}/${rv.repo}/-/raw/${currentBranch()}/${dir}`;
@@ -4991,9 +6134,9 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                             ? `${getApiBase()}/api/cb-proxy/${rv.owner}/${rv.repo}/raw/branch/${branch}/${dir}`
                             : `${getApiBase()}/api/cb-proxy/${rv.owner}/${rv.repo}/${dir}`;
                     }
-                    _renderFilePanel(name, { content, size: fileSize, isMd: true, previewHtml: `<div class="readme">${renderMd(content, mdBaseUrl)}</div>` });
+                    _renderFilePanel(name, { path: item.path || item.name, lastCommitScope: opts.lastCommitScope || 'file', content, size: fileSize, isMd: true, previewHtml: `<div class="readme">${renderMd(content, mdBaseUrl)}</div>` });
                 } else {
-                    _renderFilePanel(name, { content, size: fileSize, previewHtml: _buildCodeHtml(content, name) });
+                    _renderFilePanel(name, { path: item.path || item.name, lastCommitScope: opts.lastCommitScope || 'file', content, size: fileSize, previewHtml: _buildCodeHtml(content, name) });
                 }
             } catch (e) {
                 _activeFile = null;
@@ -5014,6 +6157,8 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             if (!panel || !opts) return;
             const f = {
                 name: name || '',
+                path: opts.path || '',
+                lastCommitScope: opts.lastCommitScope || 'file',
                 content: (opts.content !== undefined ? opts.content : '') || '',
                 imgUrl: opts.imgUrl || '',
                 isImage: !!opts.isImage,
@@ -5055,6 +6200,81 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                     </svg></button>` +
                 `</div>` +
                 `<div class="file-body" id="file-body">${f.previewHtml}</div>`;
+            if (f.path) _loadLastCommit(f.path, f.lastCommitScope);
+        }
+
+        // Consulta el último commit (del repositorio en la vista home, del archivo al abrirlo)
+        // y lo muestra encima del toolbar, sin bloquear la visualización si falla.
+        async function _loadLastCommit(filePath, scope) {
+            try {
+                scope = scope || 'file';
+                let commits = [];
+                const ref = currentBranch();
+                const pathQ = scope === 'repo' ? '' : `path=${encodeURIComponent(filePath)}&`;
+                const shaQ = ref ? `&sha=${encodeURIComponent(ref)}` : '';
+                if (rv.provider === 'gh') {
+                    const res = await ghFetch(`https://api.github.com/repos/${rv.owner}/${rv.repo}/commits?${pathQ}per_page=1${shaQ}`);
+                    if (!res.ok) return;
+                    commits = await res.json();
+                } else if (rv.provider === 'cb') {
+                    const res = await cbFetch(`${CB_BASE}/repos/${rv.owner}/${rv.repo}/commits?${pathQ}limit=1${shaQ}`);
+                    if (!res.ok) return;
+                    commits = await res.json();
+                } else {
+                    const enc = encodeURIComponent(`${rv.owner}/${rv.repo}`);
+                    const refQ = ref ? `&ref_name=${encodeURIComponent(ref)}` : '';
+                    const res = await fetch(`https://gitlab.com/api/v4/projects/${enc}/repository/commits?${pathQ}per_page=1${refQ}`);
+                    if (!res.ok) return;
+                    commits = await res.json();
+                }
+                const c = Array.isArray(commits) ? commits[0] : null;
+                if (!c) return;
+                const fullSha = c.sha || c.id || '';
+                const msg = String(c.commit?.message || c.message || c.title || '').split('\n')[0];
+                const author = c.commit?.author?.name || c.author_name || c.author?.login || '';
+                const authorUsername = c.author?.login || c.author?.username || '';
+                const email = c.author_email || c.commit?.author?.email || '';
+                const dateStr = c.commit?.author?.date || c.authored_date || c.created_at || '';
+                let dateLabel = '';
+                if (dateStr) {
+                    const dt = new Date(dateStr);
+                    if (!isNaN(dt.getTime())) {
+                        dateLabel = dt.toLocaleDateString('en', { month: 'short', day: 'numeric', year: 'numeric' });
+                    }
+                }
+                const initial = escHtml((author[0] || '?').toUpperCase());
+                const avatarUrl = c.author?.avatar_url || '';
+                let avatarHtml;
+                if (avatarUrl) {
+                    avatarHtml = `<img class="flc-avatar" src="${escAttr(avatarUrl)}" alt="" onerror="this.outerHTML='<span class=flc-avatar>${initial}</span>'" />`;
+                } else if (email) {
+                    const gravatarSrc = `https://www.gravatar.com/avatar/${md5(email.trim().toLowerCase())}?s=56&d=identicon`;
+                    avatarHtml = `<img class="flc-avatar" src="${escAttr(gravatarSrc)}" alt="" onerror="this.outerHTML='<span class=flc-avatar>${initial}</span>'" />`;
+                } else {
+                    avatarHtml = `<span class="flc-avatar">${initial}</span>`;
+                }
+                const panel = document.getElementById('code-panel');
+                if (!panel) return;
+                // Si el usuario navegó a otro archivo mientras se resolvía la consulta, no insertar.
+                if (!_activeFile || _activeFile.path !== filePath) return;
+                const toolbar = panel.querySelector('.file-toolbar');
+                if (!toolbar) return;
+                const div = document.createElement('div');
+                div.className = 'file-last-commit';
+                div.innerHTML =
+                    avatarHtml +
+                    `<span class="flc-main">` +
+                        `<span class="flc-msg" title="${escAttr(msg)}">${escHtml(msg)}</span>` +
+                        `<span class="flc-meta">` +
+                            (author ? `<span class="flc-author">${profileLink(authorUsername, author)}</span>` : '') +
+                            (fullSha ? `<a class="flc-sha" title="${escAttr(fullSha)}" onclick="showCommitDetail('${escJsStr(fullSha)}')">${escHtml(fullSha.substring(0, 7))}</a>` : '') +
+                            (dateLabel ? `<span class="flc-time" title="${escAttr(new Date(dateStr).toLocaleString('en'))}">${escHtml(dateLabel)}</span>` : '') +
+                        `</span>` +
+                    `</span>`;
+                panel.insertBefore(div, toolbar);
+            } catch (e) {
+                // La consulta del último commit es informativa; ante cualquier fallo se omite.
+            }
         }
 
         function sanitizeHttpUrl(url) {
@@ -5426,6 +6646,7 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
         window.toggleTheme = function() {
             if (_origToggle) _origToggle();
             syncHljsTheme();
+            _rethemeMermaid();
         };
 
         // Sync mobile sidebar panel with the real (desktop) sidebar data
@@ -5443,8 +6664,14 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             syncText('sb-desc', 'msb-desc');
             syncHtml('sb-tags', 'msb-tags');
             syncText('sb-created', 'msb-created');
+            syncText('sb-forks', 'msb-forks');
+            syncText('sb-watching', 'msb-watching');
             syncText('sb-status', 'msb-status');
             syncText('sb-license', 'msb-license');
+            syncText('sb-size', 'msb-size');
+            syncText('sb-lfs', 'msb-lfs');
+            syncText('sb-deployments-count', 'msb-deployments-count');
+            syncText('sb-contributors-count', 'msb-contributors-count');
             syncText('sb-star-text', 'msb-star-text');
             syncText('sb-star-count', 'msb-star-count');
             // releases
@@ -5456,6 +6683,14 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                 msbRel.innerHTML = sbRel.innerHTML;
                 msbRelLabel.style.display = relSec.style.display === 'none' ? 'none' : '';
             }
+            // tags
+            const tSec = document.getElementById('sb-tags-section');
+            const msbTSec = document.getElementById('msb-tags-section');
+            if (tSec && msbTSec) {
+                syncHtml('sb-tags-list', 'msb-tags-list');
+                syncText('sb-tags-count', 'msb-tags-count');
+                msbTSec.style.display = tSec.style.display === 'none' ? 'none' : '';
+            }
             // languages
             const langSec = document.getElementById('sb-langs-section');
             const msbLangSec = document.getElementById('msb-langs-section');
@@ -5464,6 +6699,34 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
                 syncHtml('sb-lang-legend', 'msb-lang-legend');
                 msbLangSec.style.display = langSec.style.display === 'none' ? 'none' : '';
             }
+            // contributors
+            const cSec = document.getElementById('sb-contributors-section');
+            const msbCSec = document.getElementById('msb-contributors-section');
+            if (cSec && msbCSec) {
+                syncHtml('sb-contributors', 'msb-contributors');
+                msbCSec.style.display = cSec.style.display === 'none' ? 'none' : '';
+            }
+            // deployments
+            const dSec = document.getElementById('sb-deployments-section');
+            const msbDSec = document.getElementById('msb-deployments-section');
+            if (dSec && msbDSec) {
+                syncHtml('sb-deployments', 'msb-deployments');
+                msbDSec.style.display = dSec.style.display === 'none' ? 'none' : '';
+            }
+            // homepage
+            const homeRow = document.getElementById('sb-home-row');
+            const msbHomeRow = document.getElementById('msb-home-row');
+            if (homeRow && msbHomeRow) {
+                msbHomeRow.style.display = homeRow.style.display === 'none' ? 'none' : '';
+                const homeLink = document.getElementById('sb-home-link');
+                const msbHomeLink = document.getElementById('msb-home-link');
+                if (homeLink && msbHomeLink) {
+                    msbHomeLink.href = homeLink.href;
+                    const s1 = homeLink.querySelector('span');
+                    const s2 = msbHomeLink.querySelector('span');
+                    if (s1 && s2) s2.textContent = s1.textContent;
+                }
+            }
         }
 
         // Toggle mobile sidebar panel visibility (full-screen overlay)
@@ -5516,6 +6779,10 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             renderer.code = function(token) {
                 const code = (token && token.text != null) ? token.text : (arguments[0] || '');
                 const lang = (token && token.lang != null) ? token.lang : (arguments[1] || '');
+                // Bloques ```mermaid: se convierten en un div pendiente que _renderMermaid sustituye por el diagrama.
+                if (typeof mermaid !== 'undefined' && String(lang).trim().split(/\s+/)[0].toLowerCase() === 'mermaid') {
+                    return `<div class="mermaid">${escHtml(code)}</div>`;
+                }
                 if (typeof hljs !== 'undefined' && lang && hljs.getLanguage(lang)) {
                     const hl = hljs.highlight(code, { language: lang }).value;
                     return `<pre style="white-space:pre;overflow-x:auto;"><code class="hljs language-${lang}">${hl}</code></pre>`;
@@ -5630,6 +6897,81 @@ <h2 style="font-size:1.1rem;margin:0 0 0.3rem;color:var(--fg);">${escHtml(name)}
             return result;
         }
 
+        // ---- Diagramas Mermaid en markdown ----
+        // Los bloques ```mermaid se convierten en <div class="mermaid">; un MutationObserver los
+        // detecta al insertarse en el DOM (README, archivos .md, wiki, issues, PRs, releases, comentarios)
+        // y los sustituye por el SVG renderizado.
+        let _mermaidSeq = 0;
+        let _mermaidTimer = null;
+        const _mermaidQueue = new Set();
+
+        function _mermaidTheme() {
+            const isDark = document.documentElement.getAttribute('data-theme') === 'dark' ||
+                (!document.documentElement.getAttribute('data-theme') && window.matchMedia('(prefers-color-scheme: dark)').matches);
+            return isDark ? 'dark' : 'default';
+        }
+
+        async function _renderMermaid(el) {
+            if (typeof mermaid === 'undefined' || !el || !(el instanceof HTMLElement)) return;
+            const src = (el.getAttribute('data-mermaid-src') || el.textContent || '').trim();
+            if (!src) return;
+            // Se retira la clase de "pendiente" para que el observer no lo reprocese.
+            el.classList.remove('mermaid');
+            el.setAttribute('data-mermaid-src', src);
+            try {
+                const result = await mermaid.render('mermaid-' + (++_mermaidSeq), src);
+                if (!result || !result.svg) return;
+                const div = document.createElement('div');
+                div.className = 'mermaid-graph';
+                div.setAttribute('data-mermaid-src', src);
+                div.innerHTML = result.svg;
+                el.replaceWith(div);
+            } catch (err) {
+                // Fallback: se mantiene la fuente visible (estilo .mermaid como bloque de código).
+                el.classList.add('mermaid');
+                console.warn('mermaid render failed:', err && err.message ? err.message : err);
+            }
+        }
+
+        function _scheduleMermaid(root) {
+            if (typeof mermaid === 'undefined' || !root) return;
+            if (root.matches && root.matches('.mermaid')) {
+                _mermaidQueue.add(root);
+            } else {
+                root.querySelectorAll('.mermaid').forEach(el => _mermaidQueue.add(el));
+            }
+            if (_mermaidTimer) return;
+            _mermaidTimer = setTimeout(async () => {
+                _mermaidTimer = null;
+                const pending = Array.from(_mermaidQueue);
+                _mermaidQueue.clear();
+                for (const el of pending) {
+                    if (!el.isConnected || !el.classList.contains('mermaid')) continue;
+                    await _renderMermaid(el);
+                }
+            }, 60);
+        }
+
+        function _rethemeMermaid() {
+            if (typeof mermaid === 'undefined') return;
+            mermaid.initialize({ startOnLoad: false, theme: _mermaidTheme() });
+            document.querySelectorAll('.mermaid-graph[data-mermaid-src]').forEach(el => _renderMermaid(el));
+        }
+
+        if (typeof mermaid !== 'undefined') {
+            mermaid.initialize({ startOnLoad: false, theme: _mermaidTheme() });
+            const _mermaidObserver = new MutationObserver((muts) => {
+                for (const m of muts) {
+                    if (m.type !== 'childList') continue;
+                    for (const n of m.addedNodes) {
+                        if (!(n instanceof HTMLElement)) continue;
+                        if (n.matches('.mermaid') || n.querySelector('.mermaid')) _scheduleMermaid(n);
+                    }
+                }
+            });
+            _mermaidObserver.observe(document.body, { childList: true, subtree: true });
+        }
+
         // Oculta imágenes del README rechazadas por el servidor (403/404) en vez de dejar el icono roto.
         document.addEventListener('error', (e) => {
             const t = e.target;
diff --git a/web/sw.js b/web/sw.js
index 89c3a04..755038b 100644
--- a/web/sw.js
+++ b/web/sw.js
@@ -1,4 +1,4 @@
-const CACHE_NAME = 'gitgost-v1';
+const CACHE_NAME = 'gitgost-v2';
 const PRECACHE_ASSETS = [
   '/',
   '/index.html',
@@ -38,8 +38,10 @@ self.addEventListener('fetch', (event) => {
     return;
   }
 
-  // Network-first for HTML pages and API calls
-  if (url.pathname === '/' || url.pathname.endsWith('.html') || url.pathname.startsWith('/api/')) {
+  // Network-first for HTML pages, API calls and SPA profile routes (/gh, /gl, /cb).
+  // Sin esto, las rutas de perfil (que no terminan en .html) caen en cache-first
+  // y el navegador sirve profile.html viejo para siempre tras la primera visita.
+  if (url.pathname === '/' || url.pathname.endsWith('.html') || url.pathname.startsWith('/api/') || /^\/(?:gh|gl|cb)\//.test(url.pathname)) {
     event.respondWith(
       fetch(request)
         .then((response) => {