feedkeeper 0.0.0-stage → 0.23.1

package/server/dist/db/migrations/0014_bookmark_archive.sql

@@ -0,0 +1,16 @@
+-- Saved (bookmarked) articles are archived: full text is kept on the item and
+-- images are stored as files next to the database; this table maps them.
+ALTER TABLE items ADD COLUMN archived_at TEXT;
+
+CREATE TABLE archived_images (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  source_url TEXT NOT NULL,
+  file_name TEXT NOT NULL UNIQUE,
+  mime_type TEXT NOT NULL,
+  byte_size INTEGER NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  UNIQUE (item_id, source_url)
+);
+
+CREATE INDEX idx_bookmarks_item ON item_bookmarks(item_id);

package/server/dist/db/migrations/0015_push.sql

@@ -0,0 +1,13 @@
+-- Web Push: devices that receive notifications, and per-subscription opt-in for new articles.
+ALTER TABLE subscriptions ADD COLUMN notify INTEGER NOT NULL DEFAULT 0;
+
+CREATE TABLE IF NOT EXISTS push_devices (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  endpoint TEXT NOT NULL UNIQUE,
+  p256dh TEXT NOT NULL,
+  auth TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_push_devices_user ON push_devices(user_id);

package/server/dist/db/migrations/0016_feed_badge.sql

@@ -0,0 +1,2 @@
+-- Per-subscription opt-in: unread articles of this feed count towards the number on the app icon.
+ALTER TABLE subscriptions ADD COLUMN badge INTEGER NOT NULL DEFAULT 0;

package/server/dist/db/migrations/0017_devices.sql

@@ -0,0 +1,13 @@
+-- Native apps pair with a one-time code and get their own revocable token.
+ALTER TABLE personal_access_tokens ADD COLUMN kind TEXT NOT NULL DEFAULT 'api' CHECK (kind IN ('api', 'device'));
+ALTER TABLE personal_access_tokens ADD COLUMN platform TEXT;
+ALTER TABLE personal_access_tokens ADD COLUMN app_version TEXT;
+
+-- At most one pairing code per user; creating a new one replaces the old one.
+CREATE TABLE IF NOT EXISTS pairing_codes (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL UNIQUE REFERENCES users(id) ON DELETE CASCADE,
+  code_hash TEXT NOT NULL UNIQUE,
+  expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);

package/server/dist/db/migrations/0018_change_log.sql

@@ -0,0 +1,166 @@
+-- Change log for native clients (see docs/design/native-api.md).
+--
+-- One row per object a user owns (compacted): whenever the object changes the row's seq moves
+-- forward, so the log grows with the number of objects, not with the number of changes.
+-- Triggers fill it, so every code path (web, MCP, native API, poller, cleanup) is covered.
+-- No foreign key on user_id: triggers write here while a user's data is being deleted.
+CREATE TABLE changes (
+  user_id INTEGER NOT NULL,
+  entity TEXT NOT NULL,
+  entity_id INTEGER NOT NULL,
+  op TEXT NOT NULL CHECK (op IN ('upsert', 'delete')),
+  seq INTEGER NOT NULL,
+  changed_at TEXT NOT NULL,
+  -- Per-field times of an article's state, for last-writer-wins between devices.
+  read_at TEXT,
+  saved_at TEXT,
+  progress_at TEXT,
+  PRIMARY KEY (user_id, entity, entity_id)
+) WITHOUT ROWID;
+
+CREATE INDEX idx_changes_seq ON changes(user_id, seq);
+
+-- A row exists once a user's existing data was added to the log. `pruned_through` is the highest
+-- seq of a forgotten deletion, so clients that missed it know they must start over.
+CREATE TABLE sync_state (
+  user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  pruned_through INTEGER NOT NULL DEFAULT 0
+);
+
+CREATE TABLE applied_mutations (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  mutation_id TEXT NOT NULL,
+  outcome TEXT NOT NULL,
+  error TEXT,
+  applied_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, mutation_id)
+) WITHOUT ROWID;
+
+-- Reading position of any article; positions near the start or the end are not stored.
+CREATE TABLE item_progress (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  position REAL NOT NULL,
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, item_id)
+);
+
+CREATE TRIGGER trg_changes_read_insert AFTER INSERT ON item_reads
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, read_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, read_at = excluded.read_at;
+END;
+
+CREATE TRIGGER trg_changes_read_delete AFTER DELETE ON item_reads
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, read_at)
+  VALUES (OLD.user_id, 'item_state', OLD.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, read_at = excluded.read_at;
+END;
+
+CREATE TRIGGER trg_changes_saved_insert AFTER INSERT ON item_bookmarks
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, saved_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, saved_at = excluded.saved_at;
+END;
+
+CREATE TRIGGER trg_changes_saved_delete AFTER DELETE ON item_bookmarks
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, saved_at)
+  VALUES (OLD.user_id, 'item_state', OLD.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, saved_at = excluded.saved_at;
+END;
+
+CREATE TRIGGER trg_changes_progress_insert AFTER INSERT ON item_progress
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, progress_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, progress_at = excluded.progress_at;
+END;
+
+CREATE TRIGGER trg_changes_progress_update AFTER UPDATE ON item_progress
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, progress_at)
+  VALUES (NEW.user_id, 'item_state', NEW.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, progress_at = excluded.progress_at;
+END;
+
+CREATE TRIGGER trg_changes_progress_delete AFTER DELETE ON item_progress
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at, progress_at)
+  VALUES (OLD.user_id, 'item_state', OLD.item_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at, progress_at = excluded.progress_at;
+END;
+
+CREATE TRIGGER trg_changes_subscription_insert AFTER INSERT ON subscriptions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'subscription', NEW.feed_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_subscription_update AFTER UPDATE ON subscriptions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'subscription', NEW.feed_id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_subscription_delete AFTER DELETE ON subscriptions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'subscription', OLD.feed_id, 'delete', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_folder_insert AFTER INSERT ON folders
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'folder', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_folder_update AFTER UPDATE ON folders
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'folder', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_folder_delete AFTER DELETE ON folders
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'folder', OLD.id, 'delete', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_muted_keyword_insert AFTER INSERT ON user_muted_keywords
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'muted_keyword', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_muted_keyword_update AFTER UPDATE ON user_muted_keywords
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'muted_keyword', NEW.id, 'upsert', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_muted_keyword_delete AFTER DELETE ON user_muted_keywords
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'muted_keyword', OLD.id, 'delete', (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_user_delete AFTER DELETE ON users
+BEGIN
+  DELETE FROM changes WHERE user_id = OLD.id;
+END;

package/server/dist/db/migrations/0019_native_extensions.sql

@@ -0,0 +1,111 @@
+-- Migration 0019: Feed icons, folder symbols, synchronized article notes, and curated editions
+
+-- 1. Persistent feed icons
+CREATE TABLE IF NOT EXISTS feed_icons (
+  feed_id INTEGER PRIMARY KEY REFERENCES feeds(id) ON DELETE CASCADE,
+  data BLOB NOT NULL,
+  mime TEXT NOT NULL,
+  hash TEXT NOT NULL,
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_feed_icon_insert AFTER INSERT ON feed_icons
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  SELECT s.user_id, 'subscription', s.feed_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = s.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM subscriptions s WHERE s.feed_id = NEW.feed_id
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_feed_icon_update AFTER UPDATE ON feed_icons
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  SELECT s.user_id, 'subscription', s.feed_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = s.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM subscriptions s WHERE s.feed_id = NEW.feed_id
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+-- 2. SF Symbol for folders / categories
+ALTER TABLE folders ADD COLUMN icon_symbol TEXT;
+
+-- 3. Synchronized article notes
+CREATE TABLE IF NOT EXISTS item_notes (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  content TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  PRIMARY KEY (user_id, item_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_item_notes_item ON item_notes(item_id);
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_note_insert AFTER INSERT ON item_notes
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'note', NEW.item_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_note_update AFTER UPDATE ON item_notes
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'note', NEW.item_id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_note_delete AFTER DELETE ON item_notes
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'note', OLD.item_id, 'delete',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+-- 4. Curated edition ("Deine Zeitung")
+CREATE TABLE IF NOT EXISTS editions (
+  user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  item_ids TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  expires_at TEXT
+);
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_edition_insert AFTER INSERT ON editions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'edition', 1, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_edition_update AFTER UPDATE ON editions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'edition', 1, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_changes_edition_delete AFTER DELETE ON editions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (OLD.user_id, 'edition', 1, 'delete',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = OLD.user_id),
+    strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;

package/server/dist/db/migrations/0020_fts.sql

@@ -0,0 +1,32 @@
+-- SQLite FTS5 Full-Text Search for items (titles, summaries, and full article text)
+CREATE VIRTUAL TABLE IF NOT EXISTS items_fts USING fts5(
+  title,
+  content_snippet,
+  content_html,
+  full_content_html,
+  content='items',
+  content_rowid='id',
+  tokenize='unicode61 remove_diacritics 2'
+);
+
+-- Backfill existing items into FTS index
+INSERT INTO items_fts(rowid, title, content_snippet, content_html, full_content_html)
+SELECT id, title, content_snippet, content_html, full_content_html FROM items;
+
+-- Triggers to keep FTS index in step with items
+CREATE TRIGGER IF NOT EXISTS trg_items_fts_insert AFTER INSERT ON items BEGIN
+  INSERT INTO items_fts(rowid, title, content_snippet, content_html, full_content_html)
+  VALUES (new.id, new.title, new.content_snippet, new.content_html, new.full_content_html);
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_items_fts_delete AFTER DELETE ON items BEGIN
+  INSERT INTO items_fts(items_fts, rowid, title, content_snippet, content_html, full_content_html)
+  VALUES ('delete', old.id, old.title, old.content_snippet, old.content_html, old.full_content_html);
+END;
+
+CREATE TRIGGER IF NOT EXISTS trg_items_fts_update AFTER UPDATE ON items BEGIN
+  INSERT INTO items_fts(items_fts, rowid, title, content_snippet, content_html, full_content_html)
+  VALUES ('delete', old.id, old.title, old.content_snippet, old.content_html, old.full_content_html);
+  INSERT INTO items_fts(rowid, title, content_snippet, content_html, full_content_html)
+  VALUES (new.id, new.title, new.content_snippet, new.content_html, new.full_content_html);
+END;

package/server/dist/db/migrations/0021_note_revisions.sql

@@ -0,0 +1,33 @@
+-- Keep note revisions after deletion so a stale device cannot overwrite a recreated note.
+CREATE TABLE item_note_revisions (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  item_id INTEGER NOT NULL REFERENCES items(id) ON DELETE CASCADE,
+  revision INTEGER NOT NULL,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (user_id, item_id)
+);
+
+INSERT INTO item_note_revisions (user_id, item_id, revision, updated_at)
+SELECT user_id, item_id, revision, updated_at FROM item_notes;
+
+CREATE TRIGGER trg_note_revision_insert AFTER INSERT ON item_notes
+BEGIN
+  INSERT INTO item_note_revisions (user_id, item_id, revision, updated_at)
+  VALUES (NEW.user_id, NEW.item_id, NEW.revision, NEW.updated_at)
+  ON CONFLICT (user_id, item_id) DO UPDATE SET revision = excluded.revision, updated_at = excluded.updated_at;
+END;
+
+CREATE TRIGGER trg_note_revision_update AFTER UPDATE ON item_notes
+BEGIN
+  INSERT INTO item_note_revisions (user_id, item_id, revision, updated_at)
+  VALUES (NEW.user_id, NEW.item_id, NEW.revision, NEW.updated_at)
+  ON CONFLICT (user_id, item_id) DO UPDATE SET revision = excluded.revision, updated_at = excluded.updated_at;
+END;
+
+CREATE TRIGGER trg_note_revision_delete AFTER DELETE ON item_notes
+  WHEN EXISTS (SELECT 1 FROM items WHERE id = OLD.item_id)
+BEGIN
+  UPDATE item_note_revisions SET revision = OLD.revision + 1,
+    updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  WHERE user_id = OLD.user_id AND item_id = OLD.item_id;
+END;

package/server/dist/db/migrations/0022_high_resolution_icons.sql

@@ -0,0 +1,2 @@
+-- Re-discover existing icons on the next feed poll; keep the last good image until then.
+UPDATE feeds SET icon_checked_at = NULL;

package/server/dist/db/migrations/0023_server_editions.sql

@@ -0,0 +1,81 @@
+-- Native presentation preferences never change the web folder order or stream.
+CREATE TABLE native_preferences (
+  user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  revision INTEGER NOT NULL DEFAULT 1,
+  settings TEXT NOT NULL CHECK (json_valid(settings)),
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE native_requests (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  request_id TEXT NOT NULL,
+  fingerprint TEXT NOT NULL,
+  response TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (user_id, request_id)
+) WITHOUT ROWID;
+
+ALTER TABLE editions ADD COLUMN edition_id TEXT;
+ALTER TABLE editions ADD COLUMN source TEXT NOT NULL DEFAULT 'curated';
+ALTER TABLE editions ADD COLUMN status TEXT NOT NULL DEFAULT 'active';
+ALTER TABLE editions ADD COLUMN period TEXT;
+ALTER TABLE editions ADD COLUMN title TEXT;
+ALTER TABLE editions ADD COLUMN summary TEXT;
+ALTER TABLE editions ADD COLUMN preferences_revision INTEGER NOT NULL DEFAULT 0;
+UPDATE editions SET edition_id = lower(hex(randomblob(16))),
+  expires_at = COALESCE(expires_at, strftime('%Y-%m-%dT%H:%M:%fZ', 'now', '+24 hours'));
+
+-- A retained slot keeps revisions monotonic, including expiry and dismissal.
+CREATE TABLE edition_history (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  edition_id TEXT NOT NULL,
+  item_ids TEXT NOT NULL CHECK (json_valid(item_ids)),
+  revision INTEGER NOT NULL,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (user_id, edition_id)
+) WITHOUT ROWID;
+INSERT INTO edition_history SELECT user_id, edition_id, item_ids, revision, created_at FROM editions;
+
+DROP TRIGGER trg_changes_edition_update;
+CREATE TRIGGER trg_changes_edition_update AFTER UPDATE ON editions
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'edition', 1, CASE WHEN NEW.status = 'active' THEN 'upsert' ELSE 'delete' END,
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), NEW.updated_at)
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_native_preferences_insert AFTER INSERT ON native_preferences
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'native_preferences', 1, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), NEW.updated_at)
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+CREATE TRIGGER trg_changes_native_preferences_update AFTER UPDATE ON native_preferences
+BEGIN
+  INSERT INTO changes (user_id, entity, entity_id, op, seq, changed_at)
+  VALUES (NEW.user_id, 'native_preferences', 1, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = NEW.user_id), NEW.updated_at)
+  ON CONFLICT (user_id, entity, entity_id) DO UPDATE SET op = excluded.op, seq = excluded.seq, changed_at = excluded.changed_at;
+END;
+
+-- Remove stale folder IDs atomically when any API deletes a folder. A new folder
+-- with the same name has a new identity and must not inherit old preferences.
+CREATE TRIGGER trg_native_preferences_folder_delete AFTER DELETE ON folders
+WHEN EXISTS (SELECT 1 FROM native_preferences WHERE user_id = OLD.user_id)
+BEGIN
+  UPDATE native_preferences SET
+    settings = json_set(settings,
+      '$.folderOrder', json(COALESCE((SELECT json_group_array(value) FROM json_each(settings, '$.folderOrder') WHERE value IS NULL OR value != OLD.id), '[]')),
+      '$.hiddenFolderIds', json(COALESCE((SELECT json_group_array(value) FROM json_each(settings, '$.hiddenFolderIds') WHERE value != OLD.id), '[]')),
+      '$.preferredFolderIds', json(COALESCE((SELECT json_group_array(value) FROM json_each(settings, '$.preferredFolderIds') WHERE value != OLD.id), '[]'))),
+    revision = revision + 1,
+    updated_at = strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  WHERE user_id = OLD.user_id AND (
+    EXISTS (SELECT 1 FROM json_each(settings, '$.folderOrder') WHERE value = OLD.id) OR
+    EXISTS (SELECT 1 FROM json_each(settings, '$.hiddenFolderIds') WHERE value = OLD.id) OR
+    EXISTS (SELECT 1 FROM json_each(settings, '$.preferredFolderIds') WHERE value = OLD.id)
+  );
+END;

package/server/dist/db/migrations/0024_inbox.sql

@@ -0,0 +1,5 @@
+-- Migration 0024: Universal Inbox ("Save to FeedKeeper")
+-- Creates a dedicated system feed for each user's saved web articles and inbound clippings.
+
+-- Mark feeds that are internal system inboxes rather than polled RSS sources.
+ALTER TABLE feeds ADD COLUMN is_system_inbox INTEGER NOT NULL DEFAULT 0;

package/server/dist/db/migrations/0025_edition_overview.sql

@@ -0,0 +1,2 @@
+-- Optional, provider-independent linked overviews for native editions.
+ALTER TABLE editions ADD COLUMN overview TEXT CHECK (overview IS NULL OR json_valid(overview));

package/server/dist/db/migrations/0026_article_content.sql

@@ -0,0 +1,43 @@
+-- Shared reader content lifecycle; no client- or AI-specific state.
+ALTER TABLE items ADD COLUMN content_revision INTEGER NOT NULL DEFAULT 1;
+ALTER TABLE items ADD COLUMN extraction_status TEXT NOT NULL DEFAULT 'pending';
+ALTER TABLE items ADD COLUMN extraction_attempted_at TEXT;
+ALTER TABLE items ADD COLUMN extraction_retry_at TEXT;
+UPDATE items SET extraction_status = 'ready' WHERE full_content_html IS NOT NULL;
+CREATE TABLE full_text_jobs (
+  item_id INTEGER PRIMARY KEY REFERENCES items(id) ON DELETE CASCADE,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  priority INTEGER NOT NULL DEFAULT 0,
+  available_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+CREATE INDEX idx_full_text_jobs_due ON full_text_jobs(available_at, priority);
+CREATE TRIGGER trg_content_revision AFTER UPDATE OF content_html, full_content_html, content_snippet, image_url, title, link ON items
+WHEN OLD.content_html IS NOT NEW.content_html OR OLD.full_content_html IS NOT NEW.full_content_html
+  OR OLD.content_snippet IS NOT NEW.content_snippet OR OLD.image_url IS NOT NEW.image_url OR OLD.title IS NOT NEW.title OR OLD.link IS NOT NEW.link
+BEGIN
+  UPDATE items SET content_revision = OLD.content_revision + 1,
+    extraction_status = CASE WHEN NEW.full_content_html IS NOT NULL THEN 'ready' WHEN OLD.extraction_status = 'feed_only' THEN 'pending' ELSE NEW.extraction_status END
+  WHERE id = NEW.id;
+END;
+CREATE TRIGGER trg_content_changes AFTER UPDATE OF content_revision, extraction_status, extraction_retry_at ON items
+WHEN OLD.content_revision IS NOT NEW.content_revision OR OLD.extraction_status IS NOT NEW.extraction_status OR OLD.extraction_retry_at IS NOT NEW.extraction_retry_at
+BEGIN
+  INSERT INTO changes(user_id, entity, entity_id, op, seq, changed_at)
+  SELECT owners.user_id, 'item_content', NEW.id, 'upsert',
+    (SELECT COALESCE(MAX(seq), 0) + 1 FROM changes WHERE user_id = owners.user_id), strftime('%Y-%m-%dT%H:%M:%fZ', 'now')
+  FROM (SELECT user_id FROM subscriptions WHERE feed_id = NEW.feed_id
+    UNION SELECT user_id FROM item_bookmarks WHERE item_id = NEW.id
+    UNION SELECT user_id FROM item_notes WHERE item_id = NEW.id
+    UNION SELECT e.user_id FROM editions e, json_each(e.item_ids) selected
+      WHERE selected.value = NEW.id AND e.status = 'active' AND julianday(e.expires_at) > julianday('now')) owners WHERE 1
+  ON CONFLICT(user_id, entity, entity_id) DO UPDATE SET seq = excluded.seq, changed_at = excluded.changed_at, op = excluded.op;
+END;
+
+-- Metadata-only nested updates must not issue a second FTS delete for the new body.
+DROP TRIGGER trg_items_fts_update;
+CREATE TRIGGER trg_items_fts_update AFTER UPDATE OF title, content_snippet, content_html, full_content_html ON items BEGIN
+  INSERT INTO items_fts(items_fts, rowid, title, content_snippet, content_html, full_content_html)
+  VALUES ('delete', old.id, old.title, old.content_snippet, old.content_html, old.full_content_html);
+  INSERT INTO items_fts(rowid, title, content_snippet, content_html, full_content_html)
+  VALUES (new.id, new.title, new.content_snippet, new.content_html, new.full_content_html);
+END;

package/server/dist/db/migrations/0027_oauth.sql

@@ -0,0 +1,38 @@
+-- Migration 0027: OAuth 2.1 for the remote MCP endpoint (ChatGPT, Claude and other connectors).
+-- OAuth grants live apart from personal_access_tokens: they expire, rotate and only work on /mcp.
+
+CREATE TABLE oauth_clients (
+  client_id TEXT PRIMARY KEY,
+  client_name TEXT NOT NULL,
+  redirect_uris TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now'))
+);
+
+-- Single-use authorization codes (60 seconds), stored as hashes.
+CREATE TABLE oauth_codes (
+  code_hash TEXT PRIMARY KEY,
+  client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  redirect_uri TEXT NOT NULL,
+  code_challenge TEXT NOT NULL,
+  scope TEXT NOT NULL CHECK (scope IN ('read', 'write')),
+  expires_at TEXT NOT NULL
+);
+
+-- One row per connected app: the current access token and its rotating refresh token.
+CREATE TABLE oauth_grants (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  client_id TEXT NOT NULL REFERENCES oauth_clients(client_id) ON DELETE CASCADE,
+  scope TEXT NOT NULL CHECK (scope IN ('read', 'write')),
+  access_hash TEXT NOT NULL UNIQUE,
+  access_expires_at TEXT NOT NULL,
+  refresh_hash TEXT NOT NULL UNIQUE,
+  -- The refresh token this one replaced: presenting it again means it leaked, so the grant is revoked.
+  previous_refresh_hash TEXT,
+  refresh_expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')),
+  last_used_at TEXT
+);
+CREATE INDEX idx_oauth_grants_user ON oauth_grants(user_id);
+CREATE INDEX idx_oauth_grants_client ON oauth_grants(client_id);

package/server/dist/db/migrations/0028_user_intro.sql

@@ -0,0 +1,2 @@
+-- The short introduction to the app is shown to every account once; this is when the person closed it (NULL: not yet).
+ALTER TABLE users ADD COLUMN intro_dismissed_at TEXT;

package/server/dist/db/migrations/0029_account_security.sql

@@ -0,0 +1,35 @@
+-- Account security is independent of the client used to sign in.
+CREATE TABLE account_security (
+  user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,
+  user_handle TEXT NOT NULL UNIQUE,
+  version INTEGER NOT NULL DEFAULT 0,
+  totp_secret TEXT,
+  totp_last_step INTEGER NOT NULL DEFAULT -1
+);
+CREATE TABLE passkeys (
+  id TEXT PRIMARY KEY,
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  public_key BLOB NOT NULL,
+  counter INTEGER NOT NULL DEFAULT 0,
+  transports TEXT NOT NULL,
+  name TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  last_used_at TEXT
+);
+CREATE INDEX passkeys_user ON passkeys(user_id);
+CREATE TABLE security_challenges (
+  id_hash TEXT PRIMARY KEY,
+  purpose TEXT NOT NULL,
+  user_id INTEGER REFERENCES users(id) ON DELETE CASCADE,
+  binding TEXT NOT NULL,
+  version INTEGER NOT NULL,
+  payload TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  attempts INTEGER NOT NULL DEFAULT 0
+);
+CREATE INDEX security_challenges_expiry ON security_challenges(expires_at);
+CREATE TABLE recovery_codes (
+  user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  code_hash TEXT NOT NULL,
+  PRIMARY KEY (user_id, code_hash)
+);

package/server/dist/db/migrations/0030_feed_poll_jobs.sql

@@ -0,0 +1,15 @@
+-- One application process owns polling. Pending work is durable; running locks are memory-only.
+CREATE TABLE feed_poll_jobs (
+  feed_id INTEGER PRIMARY KEY REFERENCES feeds(id) ON DELETE CASCADE,
+  host TEXT NOT NULL,
+  enqueued_at INTEGER NOT NULL,
+  available_at INTEGER NOT NULL,
+  attempts INTEGER NOT NULL DEFAULT 0
+);
+CREATE INDEX idx_feed_poll_jobs_due ON feed_poll_jobs(available_at, enqueued_at, feed_id);
+CREATE INDEX idx_feed_poll_jobs_host ON feed_poll_jobs(host);
+CREATE TABLE feed_poll_hosts (
+  host TEXT PRIMARY KEY,
+  retry_at INTEGER NOT NULL
+) WITHOUT ROWID;
+CREATE INDEX idx_feed_poll_jobs_fifo ON feed_poll_jobs(enqueued_at, feed_id);

package/server/dist/db/migrations/0031_push_outbox.sql

@@ -0,0 +1,19 @@
+-- One event per committed feed update, not one waiting task per recipient.
+-- Cursors are durable; one application process dispatches device deliveries.
+CREATE TABLE push_outbox (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  feed_id INTEGER NOT NULL REFERENCES feeds(id) ON DELETE CASCADE,
+  max_item_id INTEGER NOT NULL,
+  item_count INTEGER NOT NULL,
+  subscription_ceiling INTEGER NOT NULL,
+  subscription_cursor INTEGER NOT NULL DEFAULT 0,
+  current_subscription INTEGER NOT NULL DEFAULT 0,
+  device_cursor INTEGER NOT NULL DEFAULT 0,
+  device_ceiling INTEGER NOT NULL DEFAULT 0,
+  target_device INTEGER NOT NULL DEFAULT 0,
+  attempts INTEGER NOT NULL DEFAULT 0,
+  available_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL
+);
+CREATE INDEX idx_push_outbox_due ON push_outbox(available_at, id);
+CREATE INDEX idx_push_outbox_feed ON push_outbox(feed_id, id);