feat(feeds): add curated RSS feed review

[technowizard]

Summary

Adds user-curated RSS and Atom subscriptions to Loreo, with a calm review workflow that keeps discovered articles separate from the saved library until the reader acts.

Feeds are a recurring subscription domain rather than one-time imports. New entries stage in Review by default, while optional per-feed Auto-save applies only to entries first discovered after it is enabled. Saving creates or reuses the reader's existing Loreo article and queues extraction without duplicating links.

Architecture

flowchart TB
  UI[Feeds and Manage Feeds UI] --> API[Authenticated feed API]
  API --> Ingestion[Feed ingestion service]
  Scheduler[BullMQ recurring scheduler] --> Worker[Per-feed poll worker]
  Worker --> Ingestion
  Ingestion --> Fetch[DNS-pinned fetch and parser]
  Fetch --> Publisher[Public RSS or Atom publisher]
  Ingestion --> Items[(feed_subscriptions and feed_items)]
  Ingestion --> Save[Duplicate-aware link save]
  Save --> Links[(saved links)]
  Save --> Extraction[Content extraction queue]

Loading

What changed

Area	End state
Review	URL-backed Review, Saved, and Dismissed collections with source filtering, server-side sorting, cursor infinite loading, and focus-safe row virtualization
Management	Responsive Manage Feeds dialog with search, health filters, immediate pause/Auto-save controls, source summaries, and confirmed deletion that preserves saved articles
Ingestion	RSS 1.0/2.0 and Atom parsing, newest-50 initial staging, GUID/URL deduplication, conditional requests, failure backoff, and 90-day/500-item retention
Polling	Redis-backed recurring due-feed scans and lifecycle-deduplicated per-feed jobs, without delaying HTTP startup when Redis is unavailable
Safety	Redirect-safe DNS pinning, public-address enforcement, decompression and size limits, parser/DNS work budgets, user-scoped APIs, and database ownership constraints
Navigation	Feeds added to desktop and mobile navigation with English and Indonesian copy

Key decisions

• Review remains a discovery surface, not a full RSS reader. There is no read/unread or folder state.
• Auto-save is future-only. Enabling it never saves the existing Review backlog, and dismissed identities remain dismissed.
• Feed deletion removes subscription history but leaves independently saved Loreo articles intact.
• Feed item covers and source logos load directly from publishers by product choice, with local fallbacks for missing or failed images.
• Migration 0005 installs ownership and state constraints as NOT VALID, enforcing new writes while allowing operators to audit legacy inconsistencies before validation.

Verification

Gate	Result
Server suite	passed, 36 files / 275 tests
Web suite	passed, 28 files / 135 tests
Workspace typecheck	passed
Production build	passed
Lint and formatting	passed
Frozen lockfile install	passed
Drizzle schema drift	no changes
Fresh correctness, security, data, and standards reviews	no actionable findings

Authenticated disposable-account QA covered valid and blocked additions, mixed-source review, 78-79 item pagination, keyboard focus under virtualization, save/dismiss/reconciliation, recurring scheduler execution, failure warnings, desktop/mobile manager history, pending-add locking, publisher images, toggles, and destructive deletion with saved-article preservation.

Operations

Database migrations run at server startup. Migrations 0004 and 0005 use standard index creation and should be applied during a low-traffic maintenance window for large installations. docs/SELF_HOSTING.md includes backup, audit, monitoring, validation, and rollback guidance for migration 0005.