@zhin.js/plugin-rss 1.1.18 → 1.1.20

package/pages/index/index.js

@@ -1,5 +1,5 @@
 // Generated by build-plugin-runtime-entries.mjs. Do not edit.
-import { definePage, createDeclarativePage } from '@zhin.js/console-contract';
+import { definePage, definePageBlueprint } from '@zhin.js/console-contract';
 export const meta = definePage({
     title: 'RSS 订阅',
     titleI18n: { en: 'RSS Subscriptions' },
@@ -7,7 +7,7 @@ export const meta = definePage({
     order: 52,
     requiredPermissions: ['rss:read'],
 });
-export default createDeclarativePage({
+export default definePageBlueprint({
     title: { zh: 'RSS 订阅', en: 'RSS Subscriptions' },
     description: {
         zh: '管理 RSS/Atom 订阅源、轮询频率与已读缓存',
@@ -32,19 +32,73 @@ export default createDeclarativePage({
     ],
     actions: [
         {
-            name: 'poll-now',
-            label: { zh: '立即轮询', en: 'Poll now' },
+            name: 'addSubscription',
+            label: { zh: '添加订阅', en: 'Add Subscription' },
             variant: 'primary',
+            fields: [
+                {
+                    key: 'url',
+                    label: { zh: 'RSS 订阅源 URL', en: 'RSS Feed URL' },
+                    type: 'text',
+                    required: true,
+                },
+                {
+                    key: 'title',
+                    label: { zh: '订阅名称', en: 'Feed Title' },
+                    type: 'text',
+                },
+                {
+                    key: 'adapter',
+                    label: { zh: '推送平台', en: 'Adapter' },
+                    type: 'text',
+                    defaultValue: 'sandbox',
+                },
+                {
+                    key: 'targetType',
+                    label: { zh: '目标类型', en: 'Target Type' },
+                    type: 'select',
+                    defaultValue: 'group',
+                    options: [
+                        { value: 'group', label: { zh: '群聊 (group)', en: 'Group' } },
+                        { value: 'private', label: { zh: '私聊 (private)', en: 'Private' } },
+                    ],
+                },
+                {
+                    key: 'targetId',
+                    label: { zh: '推送目标 ID', en: 'Target ID' },
+                    type: 'text',
+                    defaultValue: 'console',
+                },
+            ],
+        },
+        {
+            name: 'removeSubscription',
+            label: { zh: '移除订阅', en: 'Remove Subscription' },
+            variant: 'danger',
+            fields: [
+                {
+                    key: 'url',
+                    label: { zh: 'RSS 订阅源 URL', en: 'RSS Feed URL' },
+                    type: 'text',
+                    required: true,
+                },
+            ],
+        },
+        {
+            name: 'pollNow',
+            label: { zh: '立即轮询', en: 'Poll Now' },
+            variant: 'secondary',
         },
         {
             name: 'clean-seen',
             label: { zh: '清理已读缓存', en: 'Clean seen cache' },
-            variant: 'secondary',
+            variant: 'ghost',
         },
     ],
     sections: [
         {
             id: 'subscriptions',
+            layout: 'table',
             title: { zh: '当前订阅列表', en: 'Active Subscriptions' },
             emptyText: { zh: '暂无 RSS 订阅', en: 'No RSS subscriptions' },
             items: 'subscriptions',

package/pages/index/index.ts

@@ -1,4 +1,4 @@
-import { definePage, createDeclarativePage } from '@zhin.js/console-contract';
+import { definePage, definePageBlueprint } from '@zhin.js/console-contract';
 
 export interface RssSubscriptionItem {
   readonly id: string;
@@ -29,7 +29,7 @@ export const meta = definePage({
   requiredPermissions: ['rss:read'],
 });
 
-export default createDeclarativePage<RssConsoleStatus>({
+export default definePageBlueprint<RssConsoleStatus>({
   title: { zh: 'RSS 订阅', en: 'RSS Subscriptions' },
   description: {
     zh: '管理 RSS/Atom 订阅源、轮询频率与已读缓存',
@@ -54,19 +54,73 @@ export default createDeclarativePage<RssConsoleStatus>({
   ],
   actions: [
     {
-      name: 'poll-now',
-      label: { zh: '立即轮询', en: 'Poll now' },
+      name: 'addSubscription',
+      label: { zh: '添加订阅', en: 'Add Subscription' },
       variant: 'primary',
+      fields: [
+        {
+          key: 'url',
+          label: { zh: 'RSS 订阅源 URL', en: 'RSS Feed URL' },
+          type: 'text',
+          required: true,
+        },
+        {
+          key: 'title',
+          label: { zh: '订阅名称', en: 'Feed Title' },
+          type: 'text',
+        },
+        {
+          key: 'adapter',
+          label: { zh: '推送平台', en: 'Adapter' },
+          type: 'text',
+          defaultValue: 'sandbox',
+        },
+        {
+          key: 'targetType',
+          label: { zh: '目标类型', en: 'Target Type' },
+          type: 'select',
+          defaultValue: 'group',
+          options: [
+            { value: 'group', label: { zh: '群聊 (group)', en: 'Group' } },
+            { value: 'private', label: { zh: '私聊 (private)', en: 'Private' } },
+          ],
+        },
+        {
+          key: 'targetId',
+          label: { zh: '推送目标 ID', en: 'Target ID' },
+          type: 'text',
+          defaultValue: 'console',
+        },
+      ],
+    },
+    {
+      name: 'removeSubscription',
+      label: { zh: '移除订阅', en: 'Remove Subscription' },
+      variant: 'danger',
+      fields: [
+        {
+          key: 'url',
+          label: { zh: 'RSS 订阅源 URL', en: 'RSS Feed URL' },
+          type: 'text',
+          required: true,
+        },
+      ],
+    },
+    {
+      name: 'pollNow',
+      label: { zh: '立即轮询', en: 'Poll Now' },
+      variant: 'secondary',
     },
     {
       name: 'clean-seen',
       label: { zh: '清理已读缓存', en: 'Clean seen cache' },
-      variant: 'secondary',
+      variant: 'ghost',
     },
   ],
   sections: [
     {
       id: 'subscriptions',
+      layout: 'table',
       title: { zh: '当前订阅列表', en: 'Active Subscriptions' },
       emptyText: { zh: '暂无 RSS 订阅', en: 'No RSS subscriptions' },
       items: 'subscriptions',

package/plugin.js

@@ -78,6 +78,9 @@ export default definePlugin({
                     throw new DataMigrationError('unavailable', 'Historical RSS subscription awaits exact-target binding');
                 if (!outbound.sendTarget)
                     throw new Error('Canonical subscription delivery requires an exact-target Outbound Host');
+                // ADR 0050 / 0055: pushes are not messages, so the plugin checks its own switch per target conversation.
+                if (!context.isEnabledFor({ conversation: input.target }))
+                    return;
                 const run = async () => { await outbound.sendTarget(input.target, input.content, { locale: input.locale }); };
                 if (migrationScopes)
                     await migrationScopes.run({ scope: subscriptionMigrationScope(input), run });
@@ -112,7 +115,7 @@ export default definePlugin({
             }
             catch { /* No persistent state port: no administrator provider. */ }
             if (state) {
-                administrator = new AdministratorRssTasks(createAdministratorRssState(database), outbound, config, undefined, runtime.locale);
+                administrator = new AdministratorRssTasks(createAdministratorRssState(database), outbound, config, undefined, runtime.locale, target => context.isEnabledFor({ conversation: target }));
                 context.lifecycle.add(() => administrator?.stop());
             }
         }

package/schema.json

@@ -2,6 +2,14 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "type": "object",
   "additionalProperties": false,
+  "x-zhin-config": {
+    "levels": [
+      "global",
+      "adapter",
+      "endpoint",
+      "conversation"
+    ]
+  },
   "properties": {
     "pollCron": {
       "type": "string",
@@ -11,25 +19,60 @@
         "en": {
           "description": "Polling schedule (6-field cron expression)."
         }
+      },
+      "x-zhin-config": {
+        "levels": [
+          "global"
+        ]
       }
     },
     "maxPerGroup": {
       "type": "number",
       "default": 30,
       "minimum": 1,
-      "maximum": 200
+      "maximum": 200,
+      "x-zhin-config": {
+        "levels": [
+          "global"
+        ]
+      }
     },
     "maxItems": {
       "type": "number",
       "default": 5,
       "minimum": 1,
-      "maximum": 20
+      "maximum": 20,
+      "x-zhin-config": {
+        "levels": [
+          "global"
+        ]
+      }
     },
     "timeout": {
       "type": "number",
       "default": 15000,
       "minimum": 1000,
-      "maximum": 60000
+      "maximum": 60000,
+      "x-zhin-config": {
+        "levels": [
+          "global"
+        ]
+      }
+    },
+    "allowPrivateNetwork": {
+      "type": "boolean",
+      "default": false,
+      "description": "允许订阅回环/内网地址上的 feed（如自建 RSSHub）。默认拒绝，因为订阅地址来自聊天用户。",
+      "x-i18n": {
+        "en": {
+          "description": "Allow feeds on loopback/LAN addresses (for example a self-hosted RSSHub). Refused by default because feed URLs come from chat users."
+        }
+      },
+      "x-zhin-config": {
+        "levels": [
+          "global"
+        ]
+      }
     }
   }
 }

package/skills/rss/tools/rss_preview_feed/index.js

@@ -12,7 +12,7 @@ export default defineAgentTool({
             return t(context.locale, 'urlRequired');
         try {
             const runtime = context.use(rssRuntimeToken);
-            const { title, items } = await fetchFeed(url, runtime.config.timeout);
+            const { title, items } = await fetchFeed(url, runtime.config);
             if (items.length === 0)
                 return t(context.locale, 'toolPreviewEmpty', { title });
             return items

package/skills/rss/tools/rss_preview_feed/index.ts

@@ -11,7 +11,7 @@ export default defineAgentTool<{ url: string }>({
     if (!url) return t(context.locale, 'urlRequired');
     try {
       const runtime = context.use(rssRuntimeToken);
-      const { title, items } = await fetchFeed(url, runtime.config.timeout);
+      const { title, items } = await fetchFeed(url, runtime.config);
       if (items.length === 0) return t(context.locale, 'toolPreviewEmpty', { title });
       return items
         .slice(0, 5)

package/src/admin-i18n.ts

@@ -146,6 +146,10 @@ const catalog = {
     "zh-CN": "平台未确认投递，请核实目标会话后取消并另建订阅；不会自动重试",
     "en": "The platform did not confirm delivery. Check the target conversation, then cancel and create another subscription; no automatic retry."
   },
+  "featureDisabled": {
+    "zh-CN": "RSS 已在目标会话停用（功能开关），本轮未投递；重新启用后从后续新文章开始推送",
+    "en": "RSS is switched off for the target conversation (feature switch); nothing was delivered this poll. Future articles are delivered once it is re-enabled."
+  },
   "delivered": {
     "zh-CN": "已确认投递；等待后续新文章",
     "en": "Delivery confirmed; waiting for future articles."

package/src/admin-tasks.ts

@@ -70,15 +70,22 @@ export class AdministratorRssTasks implements PluginTaskProvider {
   readonly #outbound: OutboundHost;
   readonly #config: Readonly<RssConfig>;
   readonly #load: FeedLoader;
+  readonly #enabledFor: (target: DeliveryTarget) => boolean;
   readonly projectLocale: Locale;
   readonly #admission = createGenerationAdmissionGate();
   #stopped = false;
   #working = false;
   get [generationAdmissionSource]() { return [this.#admission]; }
 
-  constructor(state: PluginStateStore, outbound: OutboundHost, config: Readonly<RssConfig>, load: FeedLoader = fetchFeed, projectLocale: Locale = 'zh-CN') {
+  /**
+   * `enabledFor` is the ADR 0050 / 0055 feature switch of the target conversation (pushes are not
+   * messages, so dispatch gating never sees them); a switched-off target is skipped, not sent.
+   */
+  constructor(state: PluginStateStore, outbound: OutboundHost, config: Readonly<RssConfig>, load: FeedLoader = fetchFeed, projectLocale: Locale = 'zh-CN',
+    enabledFor: (target: DeliveryTarget) => boolean = () => true) {
     if (!outbound.sendTarget) throw unavailable('exactTarget');
     this.projectLocale = projectLocale; this.#state = state; this.#outbound = outbound; this.#config = config; this.#load = load;
+    this.#enabledFor = enabledFor;
   }
   stop(): void { this.#stopped = true; }
 
@@ -169,7 +176,7 @@ export class AdministratorRssTasks implements PluginTaskProvider {
           if (this.#stopped) break;
           if (task.state !== 'scheduled' || flushed.has(task.id)) continue;
           let feed: Awaited<ReturnType<FeedLoader>>;
-          try { feed = await this.#load(task.url, this.#config.timeout); }
+          try { feed = await this.#load(task.url, this.#config); }
           catch { await this.#recordCheck(task, 'fetchFailed'); continue; }
           if (this.#stopped) break;
           // Keep only bounded identifiers, never arbitrary feed bodies, in durable state.
@@ -211,7 +218,10 @@ export class AdministratorRssTasks implements PluginTaskProvider {
   async #deliver(claimed: Task, content: string): Promise<void> {
     if (this.#stopped) return;
     let state: Task['state'] = 'unknown', detail = taskDetail('unknown');
-    try {
+    let enabled: boolean;
+    try { enabled = this.#enabledFor(claimed.target); } catch { enabled = true; }
+    if (!enabled) { state = 'scheduled'; detail = taskDetail('featureDisabled'); }
+    else try {
       const id = await this.#outbound.sendTarget!(claimed.target, content, { locale: resolveLocale(claimed.locale) });
       if (id) { state = 'scheduled'; detail = taskDetail('delivered'); }
     } catch (error) {

package/src/console.ts

@@ -7,7 +7,7 @@ import {
   type PluginConsoleRpcInput,
   type PluginConsoleRpcJson,
 } from 'zhin.js';
-import { listAllSubscriptions } from './db-store.js';
+import { getRssSubs, listAllSubscriptions } from './db-store.js';
 import { cleanOldSeen, pollAllFeeds } from './poll.js';
 import { rssRuntimeToken, type RssRuntime } from './runtime.js';
 
@@ -39,6 +39,8 @@ function resolveRssRuntime(call: PluginConsoleRpcCall, fallback?: RssRuntime): R
 
 export function createRssConsoleRpc(defaultRuntime?: RssRuntime): PluginConsoleRpc {
   const rpc = definePluginConsoleRpc({
+    // Day-to-day edits belong to operators; `:write` would otherwise infer `manage` (ADR 0049).
+    permissions: [{ id: 'rss:write', level: 'operate', description: '编辑订阅' }],
     status: {
       page: 'index',
       requiredPermissions: ['rss:read'],
@@ -58,6 +60,86 @@ export function createRssConsoleRpc(defaultRuntime?: RssRuntime): PluginConsoleR
       },
     },
     actions: {
+      'add-subscription': {
+        page: 'index',
+        requiredPermissions: ['rss:write'],
+        async handler(input: PluginConsoleRpcInput, call: PluginConsoleRpcCall): Promise<PluginConsoleRpcJson> {
+          const runtime = resolveRssRuntime(call, defaultRuntime);
+          const url = typeof input.url === 'string' ? input.url.trim() : '';
+          let parsedUrl: URL;
+          try {
+            parsedUrl = new URL(url);
+            if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
+              throw new Error('invalid protocol');
+            }
+          } catch {
+            throw new PluginConsoleRpcError('invalid_input', '请提供有效的 HTTP/HTTPS RSS 订阅源 URL');
+          }
+          const title =
+            typeof input.title === 'string' && input.title.trim()
+              ? input.title.trim()
+              : parsedUrl.hostname;
+          const adapter =
+            typeof input.adapter === 'string' && input.adapter.trim()
+              ? input.adapter.trim()
+              : 'sandbox';
+          const targetType = input.targetType === 'private' ? 'private' : 'group';
+          const targetId =
+            typeof input.targetId === 'string' && input.targetId.trim()
+              ? input.targetId.trim()
+              : 'console';
+          const Subs = getRssSubs(runtime.db);
+          if (!Subs) {
+            throw new PluginConsoleRpcError('unavailable', 'RSS 订阅表尚未初始化');
+          }
+          await Subs.insert({
+            url,
+            feed_title: title,
+            adapter_name: adapter,
+            endpoint_id: adapter,
+            channel_type: targetType,
+            channel_id: targetId,
+            creator_id: 'console',
+            creator_name: 'Console',
+            created_at: new Date().toISOString(),
+          });
+          return {
+            ok: true,
+            url,
+            title,
+            adapter,
+            targetType,
+            targetId,
+            message: `已添加 RSS 订阅：${title} (${url})`,
+          };
+        },
+      },
+      'remove-subscription': {
+        page: 'index',
+        requiredPermissions: ['rss:write'],
+        async handler(input: PluginConsoleRpcInput, call: PluginConsoleRpcCall): Promise<PluginConsoleRpcJson> {
+          const runtime = resolveRssRuntime(call, defaultRuntime);
+          const url = typeof input.url === 'string' ? input.url.trim() : '';
+          const id = typeof input.id === 'string' ? input.id.trim() : '';
+          if (!url && !id) {
+            throw new PluginConsoleRpcError('invalid_input', '请提供要移除的 RSS 订阅 URL 或 ID');
+          }
+          const Subs = getRssSubs(runtime.db);
+          if (!Subs) {
+            throw new PluginConsoleRpcError('unavailable', 'RSS 订阅表尚未初始化');
+          }
+          if (url) {
+            await Subs.delete().where({ url });
+          } else {
+            await Subs.delete().where({ id });
+          }
+          return {
+            ok: true,
+            url: url || id,
+            message: `已移除 RSS 订阅：${url || id}`,
+          };
+        },
+      },
       'poll-now': {
         page: 'index',
         requiredPermissions: ['rss:write'],
@@ -83,7 +165,15 @@ export function createRssConsoleRpc(defaultRuntime?: RssRuntime): PluginConsoleR
   const origGet = methods.get.bind(methods);
   const origHas = methods.has.bind(methods);
   const normalizeKey = (key: string) =>
-    key === 'pollNow' ? 'poll-now' : key === 'cleanSeen' ? 'clean-seen' : key;
+    key === 'pollNow'
+      ? 'poll-now'
+      : key === 'cleanSeen'
+        ? 'clean-seen'
+        : key === 'addSubscription'
+          ? 'add-subscription'
+          : key === 'removeSubscription'
+            ? 'remove-subscription'
+            : key;
   methods.get = (key: string) => origGet(normalizeKey(key));
   methods.has = (key: string) => origHas(normalizeKey(key));
   return rpc;

package/src/feed.ts

@@ -4,6 +4,10 @@ import { rssMessages as t } from './i18n.js';
  * RSS feed fetch/preview helpers (no Plugin host).
  */
 import Parser from 'rss-parser';
+import { fetchPublic, readCappedBody, type HostLookup } from './public-fetch.js';
+
+/** Feeds larger than this are refused instead of buffered. */
+const MAX_FEED_BYTES = 5 * 1024 * 1024;
 
 export interface FeedItem {
   title: string;
@@ -20,6 +24,8 @@ export interface RssConfig {
   readonly timeout: number;
   readonly maxItemsPerPoll?: number;
   readonly fetchTimeoutMs?: number;
+  /** Let feeds live on loopback/LAN addresses (self-hosted RSSHub and the like). Default false. */
+  readonly allowPrivateNetwork?: boolean;
 }
 
 export const DEFAULT_RSS_CONFIG: RssConfig = {
@@ -79,18 +85,35 @@ export function stripHtml(html: string): string {
   return out;
 }
 
+/**
+ * Fetch and parse a feed. The URL comes from chat users, so it is requested through the
+ * public-address policy (every redirect hop re-checked), with one timeout for the whole
+ * exchange and a body cap.
+ */
 export async function fetchFeed(
   url: string,
-  timeout = DEFAULT_RSS_CONFIG.timeout,
+  options: number | Pick<RssConfig, 'timeout' | 'allowPrivateNetwork'> = DEFAULT_RSS_CONFIG,
+  lookup?: HostLookup,
 ): Promise<{ title: string; items: FeedItem[] }> {
-  const parser = new Parser({
-    timeout,
-    headers: {
-      'User-Agent': 'ZhinBot-RSS/1.0',
-      Accept: 'application/rss+xml, application/atom+xml, application/xml, text/xml',
+  const { timeout, allowPrivateNetwork = false } = typeof options === 'number' ? { timeout: options } : options;
+  const { response } = await fetchPublic(url, {
+    timeoutMs: timeout,
+    lookup,
+    allowPrivateNetwork,
+    init: {
+      headers: {
+        'User-Agent': 'ZhinBot-RSS/1.0',
+        Accept: 'application/rss+xml, application/atom+xml, application/xml, text/xml',
+      },
     },
   });
-  const feed = await parser.parseURL(url);
+  if (!response.ok) {
+    await response.body?.cancel();
+    throw new Error(`Status code ${response.status}`);
+  }
+  const body = await readCappedBody(response, MAX_FEED_BYTES);
+  if (!body) throw new Error(`Feed is larger than ${MAX_FEED_BYTES} bytes`);
+  const feed = await new Parser().parseString(body.toString('utf8'));
   const items: FeedItem[] = (feed.items || []).slice(0, 20).map((item) => ({
     title: (item.title || '').trim(),
     link: (item.link || '').trim(),

package/src/poll.ts

@@ -8,10 +8,22 @@ import { fetchFeed, type FeedItem } from './feed.js';
 import { getRssSeen, getRssSubs } from './db-store.js';
 import type { RssRuntime } from './runtime.js';
 
+/** Seen rows are kept this long after the item was last present in its feed. */
+export const SEEN_RETENTION_MS = 7 * 24 * 60 * 60 * 1000;
+/** Seen rows of items still in the feed are re-stamped at most this often. */
+const SEEN_REFRESH_MS = 24 * 60 * 60 * 1000;
+
 function ts(): string {
   return new Date().toISOString();
 }
 
+/** True for an item whose own publish date is past the retention window. Undated items are never stale. */
+function isStale(item: FeedItem, cutoffMs: number): boolean {
+  if (!item.date) return false;
+  const published = Date.parse(item.date);
+  return Number.isFinite(published) && published < cutoffMs;
+}
+
 export function formatNewItems(feedTitle: string, items: FeedItem[], maxItems: number, locale: Locale = 'zh-CN'): string {
   const lines = [t(locale, 'newItems', { title: feedTitle, count: items.length })];
   for (const item of items.slice(0, maxItems)) {
@@ -26,19 +38,28 @@ export function formatNewItems(feedTitle: string, items: FeedItem[], maxItems: n
   return lines.join('\n');
 }
 
-export async function markItemsSeen(runtime: RssRuntime, feedUrl: string, items: FeedItem[]): Promise<void> {
+export async function markItemsSeen(
+  runtime: RssRuntime,
+  feedUrl: string,
+  items: FeedItem[],
+  /** Guids already stored for this feed; loaded once when the caller does not have them. */
+  knownGuids?: ReadonlySet<string>,
+): Promise<void> {
   const Seen = getRssSeen(runtime.db);
-  if (!Seen) return;
+  if (!Seen || items.length === 0) return;
+  const known = new Set(knownGuids
+    ?? (await Seen.select().where({ feed_url: feedUrl })).map((row) => String(row.item_guid ?? '')));
+  // One timestamp per batch so cleanup can drop the whole batch with a single delete.
+  const seenAt = ts();
   for (const item of items) {
-    const dup = await Seen.select().where({ feed_url: feedUrl, item_guid: item.guid });
-    if (dup.length === 0) {
-      await Seen.insert({
-        feed_url: feedUrl,
-        item_guid: item.guid,
-        item_title: item.title,
-        seen_at: ts(),
-      });
-    }
+    if (known.has(item.guid)) continue;
+    known.add(item.guid);
+    await Seen.insert({
+      feed_url: feedUrl,
+      item_guid: item.guid,
+      item_title: item.title,
+      seen_at: seenAt,
+    });
   }
 }
 
@@ -110,15 +131,28 @@ export async function checkSubscriptions(runtime: RssRuntime, options: {
 
   for (const url of options.urls) {
     try {
-      const { title, items } = await fetchFeed(url, runtime.config.timeout);
+      const { title, items } = await fetchFeed(url, runtime.config);
       const seenRows = await Seen.select().where({ feed_url: url });
-      const seenGuids = new Set(seenRows.map((r) => String(r.item_guid ?? '')));
-      const newItems = items.filter((item) => item.guid && !seenGuids.has(item.guid));
+      const seenAt = new Map(seenRows.map((r) => [String(r.item_guid ?? ''), String(r.seen_at ?? '')]));
+      const seenGuids = new Set(seenAt.keys());
+      const now = Date.now();
+      // Keep the seen row of an item that is still listed, so it is not re-announced after cleanup.
+      const refreshBefore = new Date(now - SEEN_REFRESH_MS).toISOString();
+      const refreshed = ts();
+      for (const item of items) {
+        const stamp = seenAt.get(item.guid);
+        if (item.guid && stamp !== undefined && stamp < refreshBefore) {
+          await Seen.update({ seen_at: refreshed }).where({ feed_url: url, item_guid: item.guid });
+        }
+      }
+      // An item older than the retention window can no longer have a seen row; never treat it as new.
+      const newItems = items.filter((item) => item.guid && !seenGuids.has(item.guid)
+        && !isStale(item, now - SEEN_RETENTION_MS));
       if (newItems.length === 0) {
         parts.push(t(locale, 'noNew', { title: title || url }));
         continue;
       }
-      await markItemsSeen(runtime, url, newItems);
+      await markItemsSeen(runtime, url, newItems, seenGuids);
       totalNew += newItems.length;
       const body = formatNewItems(title || url, newItems, runtime.config.maxItems, locale);
       parts.push(body);
@@ -139,21 +173,22 @@ export async function checkSubscriptions(runtime: RssRuntime, options: {
 }
 
 /**
- * Periodically clean seen records older than 7 days.
+ * Periodically clean seen records older than 7 days. Rows of items still listed in their
+ * feed are re-stamped by checkSubscriptions and therefore survive.
  */
 export async function cleanOldSeen(runtime: RssRuntime): Promise<void> {
   const Seen = getRssSeen(runtime.db);
   if (!Seen) return;
   try {
-    const cutoff = new Date();
-    cutoff.setDate(cutoff.getDate() - 7);
-    const cutoffStr = cutoff.toISOString();
+    const cutoffStr = new Date(Date.now() - SEEN_RETENTION_MS).toISOString();
     const all = await Seen.select();
-    const expired = all.filter((r) => typeof r.seen_at === 'string' && r.seen_at < cutoffStr);
-    for (const row of expired) {
-      // 表结构没有 id 列，按业务键 (feed_url, item_guid) 删除。
-      await Seen.delete().where({ feed_url: row.feed_url, item_guid: row.item_guid });
+    // The table has no id column. Rows of one batch share (feed_url, seen_at), so one delete per batch.
+    const batches = new Map<string, { feed_url: unknown; seen_at: string }>();
+    for (const row of all) {
+      if (typeof row.seen_at !== 'string' || row.seen_at >= cutoffStr) continue;
+      batches.set(`${String(row.feed_url)}\0${row.seen_at}`, { feed_url: row.feed_url, seen_at: row.seen_at });
     }
+    for (const batch of batches.values()) await Seen.delete().where(batch);
   } catch (e) {
     // Cleanup failure must not break the main flow, but it must be visible.
     console.warn(`[rss] cleanOldSeen failed: ${e instanceof Error ? e.message : String(e)}`);