Changelog

v0.2.0 — 2026-08

Snooze, saved lists, ingestors, and the production deployment.

Snooze — hide articles until later today / tomorrow / next week; they stay unread and resurface on expiry. Keyboard: s t w, unsnooze u.
Saved lists — permanent private or public collections; every public list is an RSS feed at /lists/<token>.xml.
Save-to-list keyboard shortcuts — bind any key to a list and toggle membership in one press; configured in the All lists… dialog.
List chips in the reader — toggle buttons like the subject filter, with overflow lists in a dropdown.
Keyboard navigation marks read — j/k mark the landed-on article.
Ingestors — Mastodon, Bluesky, and Reddit timelines as feeds, with digest modes (realtime / hourly / daily) and optional LLM filtering and summarization.
Security hardening — SSRF guard on all outbound fetches, fail-closed LLM filtering without a key, connection/body caps on the HTTP listener, credential redaction and override-key stripping at the API boundary, hardened HTML sanitizer and XML parser.
Hosted deployment — systemd user service on loopback behind a Cloudflare Access-protected tunnel.

The reading core.

RSS 2.0 / Atom / RDF parsing with conditional GET polling, adaptive refresh intervals, and exponential backoff.
Server-side DOMPurify sanitization for every article body.
Three-pane UI with day grouping, per-feed unread counts, mark-all-read.
Electron desktop shell and web SPA from one codebase.
Embedded SQLite storage; loopback-only server by default.
Feed auto-discovery behind common blog URLs.