feedkeeper 0.0.0-stage → 0.23.0

package/server/dist/config.js

@@ -0,0 +1,51 @@
+import { config as loadEnv } from "dotenv";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { readPollSettings } from "./feeds/pollSettings.js";
+import { parseTrustProxy } from "./trustProxy.js";
+import { readImageCacheSettings } from "./feeds/imageCacheSettings.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+// Loads the repo-root .env regardless of the process's current working
+// directory, so `npm run dev`/`start` behave the same from anywhere.
+// `quiet: true` suppresses dotenv's own console output (including its
+// unrelated third-party promo "tips"), which has no place in server logs.
+loadEnv({ path: join(__dirname, "../../.env"), quiet: true });
+function required(name, fallback) {
+    const value = process.env[name] ?? fallback;
+    if (value === undefined) {
+        throw new Error(`Missing required environment variable: ${name}`);
+    }
+    return value;
+}
+export const config = {
+    imageCache: readImageCacheSettings(),
+    polling: readPollSettings(),
+    port: Number(process.env.PORT ?? 3000),
+    publicUrl: required("PUBLIC_URL", "http://localhost:3000"),
+    databasePath: required("DATABASE_PATH", "./data/feedkeeper.sqlite"),
+    // Images of saved articles live outside the database so it stays small.
+    archivePath: process.env.ARCHIVE_PATH ?? join(dirname(process.env.DATABASE_PATH ?? "./data/feedkeeper.sqlite"), "archive"),
+    sessionSecret: required("SESSION_SECRET"),
+    allowSignup: process.env.ALLOW_SIGNUP === "true",
+    trustProxy: parseTrustProxy(process.env.TRUST_PROXY),
+    clientIpHeader: process.env.CLIENT_IP_HEADER?.trim() || null,
+    minPollIntervalMinutes: Number(process.env.MIN_POLL_INTERVAL_MINUTES ?? 5),
+    retentionReadDays: Number(process.env.RETENTION_READ_DAYS ?? 30),
+    retentionMaxDays: Number(process.env.RETENTION_MAX_DAYS ?? 90),
+    retentionMaxItemsPerFeed: Number(process.env.RETENTION_MAX_ITEMS_PER_FEED ?? 1000),
+    autoCleanupEnabled: process.env.AUTO_CLEANUP_ENABLED !== "false",
+    // Optional: only these hosts may register OAuth redirect URIs (comma-separated). Loopback addresses are always allowed.
+    oauthAllowedRedirectHosts: (process.env.OAUTH_ALLOWED_REDIRECT_HOSTS ?? "")
+        .split(",")
+        .map((host) => host.trim().toLowerCase())
+        .filter(Boolean),
+    showGithubLink: process.env.SHOW_GITHUB_LINK !== "false",
+    githubUrl: process.env.GITHUB_URL ?? "https://github.com/visualfusion/feedkeeper",
+};
+if (!config.sessionSecret.trim()) {
+    throw new Error("SESSION_SECRET must not be empty");
+}
+if (config.sessionSecret.trim().length < 32) {
+    console.warn("[config] SESSION_SECRET is shorter than 32 characters; use a long random secret for new installations");
+}
+//# sourceMappingURL=config.js.map

package/server/dist/db/index.js

@@ -0,0 +1,40 @@
+import Database from "better-sqlite3";
+import { mkdirSync, readdirSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { config } from "../config.js";
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const MIGRATIONS_DIR = join(__dirname, "migrations");
+mkdirSync(dirname(config.databasePath), { recursive: true });
+export const db = new Database(config.databasePath);
+db.pragma("journal_mode = WAL");
+db.pragma("foreign_keys = ON");
+function ensureMigrationsTable() {
+    db.exec(`CREATE TABLE IF NOT EXISTS _migrations (
+      name TEXT PRIMARY KEY,
+      applied_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+    )`);
+}
+export function runMigrations() {
+    ensureMigrationsTable();
+    const applied = new Set(db.prepare("SELECT name FROM _migrations").all().map((row) => row.name));
+    const files = readdirSync(MIGRATIONS_DIR)
+        .filter((file) => file.endsWith(".sql"))
+        .sort();
+    for (const file of files) {
+        if (applied.has(file))
+            continue;
+        const sql = readFileSync(join(MIGRATIONS_DIR, file), "utf8");
+        const applyMigration = db.transaction(() => {
+            db.exec(sql);
+            db.prepare("INSERT INTO _migrations (name) VALUES (?)").run(file);
+        });
+        applyMigration();
+        console.log(`[db] applied migration ${file}`);
+    }
+}
+export function hasAnyUser() {
+    const row = db.prepare("SELECT COUNT(*) AS count FROM users").get();
+    return row.count > 0;
+}
+//# sourceMappingURL=index.js.map

package/server/dist/db/migrations/0001_init.sql

@@ -0,0 +1,70 @@
+-- Initial schema.
+-- Feeds are shared across users so the same source URL is only ever fetched
+-- once; per-user state (subscription label, read status) lives separately.
+
+CREATE TABLE users (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  email TEXT NOT NULL UNIQUE,
+  password_hash TEXT NOT NULL,
+  display_name TEXT NOT NULL,
+  role TEXT NOT NULL CHECK (role IN ('admin', 'user')) DEFAULT 'user',
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+CREATE TABLE personal_access_tokens (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  name TEXT NOT NULL,
+  token_hash TEXT NOT NULL UNIQUE,
+  token_prefix TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  last_used_at TEXT
+);
+
+CREATE INDEX idx_pat_user ON personal_access_tokens(user_id);
+
+CREATE TABLE feeds (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  url TEXT NOT NULL UNIQUE,
+  title TEXT,
+  site_url TEXT,
+  poll_interval_minutes INTEGER NOT NULL DEFAULT 15,
+  last_polled_at TEXT,
+  last_error TEXT,
+  etag TEXT,
+  last_modified TEXT,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+CREATE TABLE subscriptions (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  feed_id INTEGER NOT NULL REFERENCES feeds(id) ON DELETE CASCADE,
+  label TEXT,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  UNIQUE (user_id, feed_id)
+);
+
+CREATE INDEX idx_subscriptions_user ON subscriptions(user_id);
+CREATE INDEX idx_subscriptions_feed ON subscriptions(feed_id);
+
+CREATE TABLE items (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  feed_id INTEGER NOT NULL REFERENCES feeds(id) ON DELETE CASCADE,
+  guid TEXT NOT NULL,
+  title TEXT,
+  link TEXT,
+  content_snippet TEXT,
+  published_at TEXT,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  UNIQUE (feed_id, guid)
+);
+
+CREATE INDEX idx_items_feed ON items(feed_id, published_at DESC);
+
+CREATE TABLE item_reads (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  read_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, item_id)
+);

package/server/dist/db/migrations/0002_feed_health.sql

@@ -0,0 +1,5 @@
+ALTER TABLE feeds ADD COLUMN last_success_at TEXT;
+ALTER TABLE feeds ADD COLUMN consecutive_errors INTEGER NOT NULL DEFAULT 0;
+
+UPDATE feeds SET last_success_at = last_polled_at WHERE last_error IS NULL AND last_polled_at IS NOT NULL;
+UPDATE feeds SET consecutive_errors = 1 WHERE last_error IS NOT NULL;

package/server/dist/db/migrations/0003_retention.sql

@@ -0,0 +1,13 @@
+-- Migration 0003: System settings for database retention and housekeeping
+
+CREATE TABLE IF NOT EXISTS system_settings (
+  key TEXT PRIMARY KEY,
+  value TEXT NOT NULL,
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+INSERT OR IGNORE INTO system_settings (key, value) VALUES
+  ('retention_read_days', '30'),
+  ('retention_max_days', '90'),
+  ('retention_max_items_per_feed', '1000'),
+  ('auto_cleanup_enabled', 'true');

package/server/dist/db/migrations/0004_bookmarks_and_filters.sql

@@ -0,0 +1,20 @@
+-- Migration 0004: Bookmarks (Saved Items) and User Muted Keywords
+
+CREATE TABLE IF NOT EXISTS item_bookmarks (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, item_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_bookmarks_user ON item_bookmarks(user_id);
+
+CREATE TABLE IF NOT EXISTS user_muted_keywords (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  keyword TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  UNIQUE (user_id, keyword)
+);
+
+CREATE INDEX IF NOT EXISTS idx_muted_user ON user_muted_keywords(user_id);

package/server/dist/db/migrations/0005_folders.sql

@@ -0,0 +1,15 @@
+-- Migration 0005: Feed Folders / Categories
+
+CREATE TABLE IF NOT EXISTS folders (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  name TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  UNIQUE (user_id, name)
+);
+
+CREATE INDEX IF NOT EXISTS idx_folders_user ON folders(user_id);
+
+ALTER TABLE subscriptions ADD COLUMN folder_id INTEGER REFERENCES folders(id) ON DELETE SET NULL;
+
+CREATE INDEX IF NOT EXISTS idx_subscriptions_folder ON subscriptions(folder_id);

package/server/dist/db/migrations/0006_feed_position.sql

@@ -0,0 +1,5 @@
+-- Migration 0006: Custom Feed Ordering (position)
+
+ALTER TABLE subscriptions ADD COLUMN position INTEGER NOT NULL DEFAULT 0;
+
+CREATE INDEX IF NOT EXISTS idx_subscriptions_user_pos ON subscriptions(user_id, position);

package/server/dist/db/migrations/0007_item_image_url.sql

@@ -0,0 +1,2 @@
+-- Migration 0007: Store image URL for feed items
+ALTER TABLE items ADD COLUMN image_url TEXT;

package/server/dist/db/migrations/0008_item_content_html.sql

@@ -0,0 +1,2 @@
+-- Migration 0008: Store full content HTML for feed items
+ALTER TABLE items ADD COLUMN content_html TEXT;

package/server/dist/db/migrations/0009_item_full_content_html.sql

@@ -0,0 +1 @@
+ALTER TABLE items ADD COLUMN full_content_html TEXT;

package/server/dist/db/migrations/0010_token_scope.sql

@@ -0,0 +1,3 @@
+-- Existing tokens keep their original write access. New tokens can be read-only.
+ALTER TABLE personal_access_tokens
+  ADD COLUMN scope TEXT NOT NULL DEFAULT 'write' CHECK (scope IN ('read', 'write'));

package/server/dist/db/migrations/0011_user_avatars.sql

@@ -0,0 +1,8 @@
+-- Profile photos live in their own table so user lookups on every request
+-- never load image data, and backups keep covering a single SQLite file.
+CREATE TABLE user_avatars (
+  user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  mime_type TEXT NOT NULL CHECK (mime_type IN ('image/jpeg', 'image/png', 'image/webp')),
+  data BLOB NOT NULL,
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);

package/server/dist/db/migrations/0012_full_text_settings.sql

@@ -0,0 +1,5 @@
+-- Per-subscription choice whether the reader may fetch full articles, and a
+-- per-feed memory of sites that answer full-text requests with a consent wall.
+ALTER TABLE subscriptions ADD COLUMN full_text_mode TEXT NOT NULL DEFAULT 'auto' CHECK (full_text_mode IN ('auto', 'never'));
+ALTER TABLE feeds ADD COLUMN full_text_blocks INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE feeds ADD COLUMN full_text_blocked_at TEXT;

package/server/dist/db/migrations/0013_feed_icons.sql

@@ -0,0 +1,4 @@
+-- Icon declared by the feed's website, so the browser does not rely on a
+-- guessed /favicon.ico that may be missing or blank.
+ALTER TABLE feeds ADD COLUMN icon_url TEXT;
+ALTER TABLE feeds ADD COLUMN icon_checked_at TEXT;

package/server/dist/db/migrations/0014_bookmark_archive.sql

@@ -0,0 +1,16 @@
+-- Saved (bookmarked) articles are archived: full text is kept on the item and
+-- images are stored as files next to the database; this table maps them.
+ALTER TABLE items ADD COLUMN archived_at TEXT;
+
+CREATE TABLE archived_images (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  source_url TEXT NOT NULL,
+  file_name TEXT NOT NULL UNIQUE,
+  mime_type TEXT NOT NULL,
+  byte_size INTEGER NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  UNIQUE (item_id, source_url)
+);
+
+CREATE INDEX idx_bookmarks_item ON item_bookmarks(item_id);

package/server/dist/db/migrations/0015_push.sql

@@ -0,0 +1,13 @@
+-- Web Push: devices that receive notifications, and per-subscription opt-in for new articles.
+ALTER TABLE subscriptions ADD COLUMN notify INTEGER NOT NULL DEFAULT 0;
+
+CREATE TABLE IF NOT EXISTS push_devices (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  endpoint TEXT NOT NULL UNIQUE,
+  p256dh TEXT NOT NULL,
+  auth TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_push_devices_user ON push_devices(user_id);

package/server/dist/db/migrations/0016_feed_badge.sql

@@ -0,0 +1,2 @@
+-- Per-subscription opt-in: unread articles of this feed count towards the number on the app icon.
+ALTER TABLE subscriptions ADD COLUMN badge INTEGER NOT NULL DEFAULT 0;

package/server/dist/db/migrations/0017_devices.sql

@@ -0,0 +1,13 @@
+-- Native apps pair with a one-time code and get their own revocable token.
+ALTER TABLE personal_access_tokens ADD COLUMN kind TEXT NOT NULL DEFAULT 'api' CHECK (kind IN ('api', 'device'));
+ALTER TABLE personal_access_tokens ADD COLUMN platform TEXT;
+ALTER TABLE personal_access_tokens ADD COLUMN app_version TEXT;
+
+-- At most one pairing code per user; creating a new one replaces the old one.
+CREATE TABLE IF NOT EXISTS pairing_codes (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL UNIQUE REFERENCES users(id) ON DELETE CASCADE,
+  code_hash TEXT NOT NULL UNIQUE,
+  expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);

package/server/dist/db/migrations/0018_change_log.sql

@@ -0,0 +1,166 @@
+-- Change log for native clients (see docs/design/native-api.md).
+--
+-- One row per object a user owns (compacted): whenever the object changes the row's seq moves
+-- forward, so the log grows with the number of objects, not with the number of changes.
+-- Triggers fill it, so every code path (web, MCP, native API, poller, cleanup) is covered.
+-- No foreign key on user_id: triggers write here while a user's data is being deleted.
+CREATE TABLE changes (
+  user_id INTEGER NOT NULL,
+  entity TEXT NOT NULL,
+  entity_id INTEGER NOT NULL,
+  op TEXT NOT NULL CHECK (op IN ('upsert', 'delete')),
+  seq INTEGER NOT NULL,
+  changed_at TEXT NOT NULL,
+  -- Per-field times of an article's state, for last-writer-wins between devices.
+  read_at TEXT,
+  saved_at TEXT,
+  progress_at TEXT,
+  PRIMARY KEY (user_id, entity, entity_id)
+) WITHOUT ROWID;
+
+CREATE INDEX idx_changes_seq ON changes(user_id, seq);
+
+-- A row exists once a user's existing data was added to the log. `pruned_through` is the highest
+-- seq of a forgotten deletion, so clients that missed it know they must start over.
+CREATE TABLE sync_state (
+  user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  pruned_through INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE TABLE applied_mutations (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  mutation_id TEXT NOT NULL,
+  outcome TEXT NOT NULL,
+  error TEXT,
+  applied_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, mutation_id)
+) WITHOUT ROWID;
+
+-- Reading position of any article; positions near the start or the end are not stored.
+CREATE TABLE item_progress (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  position REAL NOT NULL,
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, item_id)
+);
+
+CREATE TRIGGER trg_changes_read_insert AFTER INSERT ON item_reads
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, read_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, read_at = excluded.read_at;
+END;
+
+CREATE TRIGGER trg_changes_read_delete AFTER DELETE ON item_reads
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, read_at)
+  VALUES (OLD.user_id, 'item_state', OLD.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, read_at = excluded.read_at;
+END;
+
+CREATE TRIGGER trg_changes_saved_insert AFTER INSERT ON item_bookmarks
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, saved_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, saved_at = excluded.saved_at;
+END;
+
+CREATE TRIGGER trg_changes_saved_delete AFTER DELETE ON item_bookmarks
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, saved_at)
+  VALUES (OLD.user_id, 'item_state', OLD.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, saved_at = excluded.saved_at;
+END;
+
+CREATE TRIGGER trg_changes_progress_insert AFTER INSERT ON item_progress
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, progress_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, progress_at = excluded.progress_at;
+END;
+
+CREATE TRIGGER trg_changes_progress_update AFTER UPDATE ON item_progress
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, progress_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, progress_at = excluded.progress_at;
+END;
+
+CREATE TRIGGER trg_changes_progress_delete AFTER DELETE ON item_progress
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, progress_at)
+  VALUES (OLD.user_id, 'item_state', OLD.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, progress_at = excluded.progress_at;
+END;
+
+CREATE TRIGGER trg_changes_subscription_insert AFTER INSERT ON subscriptions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'subscription', NEW.feed_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_subscription_update AFTER UPDATE ON subscriptions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'subscription', NEW.feed_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_subscription_delete AFTER DELETE ON subscriptions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'subscription', OLD.feed_id, 'delete', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_folder_insert AFTER INSERT ON folders
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'folder', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_folder_update AFTER UPDATE ON folders
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'folder', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_folder_delete AFTER DELETE ON folders
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'folder', OLD.id, 'delete', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_muted_keyword_insert AFTER INSERT ON user_muted_keywords
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'muted_keyword', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_muted_keyword_update AFTER UPDATE ON user_muted_keywords
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'muted_keyword', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_muted_keyword_delete AFTER DELETE ON user_muted_keywords
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'muted_keyword', OLD.id, 'delete', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_user_delete AFTER DELETE ON users
+BEGIN
+  DELETE FROM changes WHERE user_id = OLD.id;
+END;

package/server/dist/db/migrations/0019_native_extensions.sql

@@ -0,0 +1,111 @@
+-- Migration 0019: Feed icons, folder symbols, synchronized article notes, and curated editions
+
+-- 1. Persistent feed icons
+CREATE TABLE IF NOT EXISTS feed_icons (
+  feed_id INTEGER PRIMARY KEY REFERENCES feeds(id) ON DELETE CASCADE,
+  data BLOB NOT NULL,
+  mime TEXT NOT NULL,
+  hash TEXT NOT NULL,
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_feed_icon_insert AFTER INSERT ON feed_icons
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  SELECT s.user_id, 'subscription', s.feed_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = s.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM subscriptions s WHERE s.feed_id = NEW.feed_id
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_feed_icon_update AFTER UPDATE ON feed_icons
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  SELECT s.user_id, 'subscription', s.feed_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = s.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM subscriptions s WHERE s.feed_id = NEW.feed_id
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+-- 2. SF Symbol for folders / categories
+ALTER TABLE folders ADD COLUMN icon_symbol TEXT;
+
+-- 3. Synchronized article notes
+CREATE TABLE IF NOT EXISTS item_notes (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  content TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, item_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_item_notes_item ON item_notes(item_id);
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_note_insert AFTER INSERT ON item_notes
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'note', NEW.item_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_note_update AFTER UPDATE ON item_notes
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'note', NEW.item_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_note_delete AFTER DELETE ON item_notes
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'note', OLD.item_id, 'delete',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+-- 4. Curated edition ("Deine Zeitung")
+CREATE TABLE IF NOT EXISTS editions (
+  user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  item_ids TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  expires_at TEXT
+);
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_edition_insert AFTER INSERT ON editions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'edition', 1, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_edition_update AFTER UPDATE ON editions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'edition', 1, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_edition_delete AFTER DELETE ON editions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'edition', 1, 'delete',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;

package/server/dist/db/migrations/0020_fts.sql

@@ -0,0 +1,32 @@
+-- SQLite FTS5 Full-Text Search for items (titles, summaries, and full article text)
+CREATE VIRTUAL TABLE IF NOT EXISTS items_fts USING fts5(
+  title,
+  content_snippet,
+  content_html,
+  full_content_html,
+  content='items',
+  content_rowid='id',
+  tokenize='unicode61 remove_diacritics 2'
+);
+
+-- Backfill existing items into FTS index
+INSERT INTO items_fts(rowid, title, content_snippet, content_html, full_content_html)
+SELECT id, title, content_snippet, content_html, full_content_html FROM items;
+
+-- Triggers to keep FTS index in step with items
+CREATE TRIGGER IF NOT EXISTS trg_items_fts_insert AFTER INSERT ON items BEGIN
+  INSERT INTO items_fts(rowid, title, content_snippet, content_html, full_content_html)
+  VALUES (new.id, new.title, new.content_snippet, new.content_html, new.full_content_html);
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_items_fts_delete AFTER DELETE ON items BEGIN
+  INSERT INTO items_fts(items_fts, rowid, title, content_snippet, content_html, full_content_html)
+  VALUES ('delete', old.id, old.title, old.content_snippet, old.content_html, old.full_content_html);
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_items_fts_update AFTER UPDATE ON items BEGIN
+  INSERT INTO items_fts(items_fts, rowid, title, content_snippet, content_html, full_content_html)
+  VALUES ('delete', old.id, old.title, old.content_snippet, old.content_html, old.full_content_html);
+  INSERT INTO items_fts(rowid, title, content_snippet, content_html, full_content_html)
+  VALUES (new.id, new.title, new.content_snippet, new.content_html, new.full_content_html);
+END;