4.x

.dockerignore

@@ -1,9 +1,11 @@
 .git
 .github
-.circleci
-node_modules
-data
-xunit
+**/node_modules
+**/data
+packages/*/dist
+packages/*/coverage
+.turbo
+**/xunit
 .nyc_output
 .env
 .DS_Store

.github/workflows/ci.yml

@@ -0,0 +1,77 @@
+name: CI
+
+on:
+    pull_request:
+        branches: [main]
+    push:
+        branches: [main]
+
+concurrency:
+    group: ci-${{ github.workflow }}-${{ github.ref }}
+    cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+permissions:
+    contents: read
+
+jobs:
+    lint-and-unit:
+        name: Lint & unit (Node ${{ matrix.node }})
+        runs-on: ubuntu-latest
+        strategy:
+            fail-fast: false
+            matrix:
+                node: ['22', '24', '26']
+        steps:
+            - uses: actions/checkout@v5
+
+            - name: Enable corepack
+              run: corepack enable
+
+            - uses: actions/setup-node@v5
+              with:
+                  node-version: ${{ matrix.node }}
+                  cache: 'pnpm'
+
+            - name: Install dependencies
+              run: pnpm install --frozen-lockfile
+
+            - name: Build
+              run: pnpm build
+
+            - name: Lint
+              run: pnpm lint
+
+            - name: Typecheck
+              run: pnpm typecheck
+
+            - name: Unit tests
+              run: pnpm test:unit
+
+            - name: Upload core coverage
+              if: matrix.node == '22'
+              uses: actions/upload-artifact@v4
+              with:
+                  name: core-coverage
+                  path: packages/core/coverage/
+                  if-no-files-found: ignore
+
+    integration:
+        name: Integration (Docker, Node 22)
+        runs-on: ubuntu-latest
+        needs: lint-and-unit
+        steps:
+            - uses: actions/checkout@v5
+
+            - name: Set up Docker Buildx
+              uses: docker/setup-buildx-action@v3
+
+            - name: Run integration tests
+              run: docker compose -f apps/e2e/docker-compose.yml up --build --abort-on-container-exit --attach rsscloud-tests --no-log-prefix
+
+            - name: Upload xunit results
+              if: always()
+              uses: actions/upload-artifact@v4
+              with:
+                  name: server-xunit
+                  path: apps/e2e/xunit/test-results.xml
+                  if-no-files-found: warn

.github/workflows/release-please.yml

@@ -1,18 +1,16 @@
 name: release-please
 
 on:
-  push:
-    branches:
-      - main
+    push:
+        branches:
+            - main
 
 permissions:
-  contents: write
-  pull-requests: write
+    contents: write
+    pull-requests: write
 
 jobs:
-  release-please:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: googleapis/release-please-action@v4
-        with:
-          release-type: node
+    release-please:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: googleapis/release-please-action@v4

.gitignore

@@ -1,8 +1,12 @@
 .DS_Store
 .env
 .nyc_output/
-/data/
-/node_modules/
-/xunit/
+coverage/
+data/
+dist/
+node_modules/
+xunit/
+.turbo/
 Procfile
 tunnel.sh
+*.local.*

.jshintrc

@@ -1 +1 @@
-{ "esversion":8 }
+{ "esversion": 8 }

.prettierignore

@@ -5,6 +5,7 @@ package-lock.json
 # Build output
 dist/
 build/
+coverage/
 
 # Third-party libraries
 public/js/

.prettierrc

@@ -1,13 +1,13 @@
 {
-  "tabWidth": 4,
-  "useTabs": false,
-  "semi": true,
-  "singleQuote": true,
-  "quoteProps": "as-needed",
-  "trailingComma": false,
-  "bracketSpacing": true,
-  "bracketSameLine": false,
-  "arrowParens": "avoid",
-  "printWidth": 80,
-  "endOfLine": "lf"
+    "tabWidth": 4,
+    "useTabs": false,
+    "semi": true,
+    "singleQuote": true,
+    "quoteProps": "as-needed",
+    "trailingComma": "none",
+    "bracketSpacing": true,
+    "bracketSameLine": false,
+    "arrowParens": "avoid",
+    "printWidth": 80,
+    "endOfLine": "lf"
 }

.release-please-manifest.json

@@ -1,3 +1,6 @@
 {
-  ".": "3.0.0"
+    "apps/server": "4.0.0",
+    "packages/xml-rpc": "0.0.0",
+    "packages/core": "0.0.0",
+    "packages/express": "0.0.0"
 }

CLAUDE.md

@@ -2,100 +2,28 @@
 
 This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
 
-## Project Overview
+## What this is
 
-This is an rssCloud Server v2 implementation in Node.js - a notification protocol server that allows RSS feeds to notify subscribers when they are updated. The server handles subscription management and real-time notifications for RSS/feed updates.
+An [rssCloud](http://rsscloud.org/) notification protocol server. Subscribers register a callback URL via `/pleaseNotify`; publishers `/ping` when feeds update; the server fans notifications out to subscribers. Implementation lives in `apps/server/`.
 
-## Development Commands
+## Development workflow
 
-This project uses pnpm with corepack. Run `corepack enable` to set up pnpm automatically.
+Build features and fix bugs with the **`tdd` skill** — strict red-green-refactor, one vertical slice at a time. Write a failing test, make it pass, refactor; don't batch all the tests and all the code together.
 
-### Start Development
+Packages under `packages/` (e.g. `@rsscloud/core`) are held to **100% code coverage**. Keep them there — every branch and line exercised by a test. If something genuinely can't or shouldn't be covered, justify it with an explicit ignore rather than letting coverage slip.
 
-- `pnpm start` - Start server with nodemon (auto-reload on changes)
-- `pnpm run client` - Start client with nodemon
+## Data storage
 
-### Testing & Quality
+State (resources and subscriptions) is held in memory and persisted atomically to a JSON file (default `./data/subscriptions.json`, configurable via `DATA_FILE_PATH`). The flush happens on an interval, at shutdown, and on unexpected exit. There is no external database.
 
-- `pnpm test` - Run full API tests using Docker containers (MacOS tested)
-- `pnpm run lint` - Run ESLint with auto-fix on controllers/, services/, test/
+## End-to-end tests
 
-## Architecture
+`apps/e2e/` is a private workspace package holding a full mocha suite. Tests talk to the server over HTTP via `APP_URL` and spin up their own mock servers on ports 8002/8003.
 
-### Core Application Structure
+A handful of server-internal helpers (RPC builders, dayjs wrapper, `init-subscription`, three config keys) are **intentionally duplicated** in `apps/e2e/test/helpers/` rather than imported across the workspace boundary. This preserves the e2e package as an independent consumer of the server's HTTP+RPC protocol, at the cost of some maintenance overhead if those helpers' wire-shape ever changes. If you find yourself adding a new `require('../...')` in a test file, prefer copying the dependency into `helpers/` instead.
 
-- **app.js** - Main Express application entry point, sets up middleware, loads jsonStore from disk, and starts server
-- **config.js** - Configuration management reading from env vars with defaults
-- **controllers/** - Express route handlers for API endpoints
-- **services/** - Business logic modules for core functionality
-- **views/** - Handlebars templates for web interface
+## Releases
 
-### Key Services
+Conventional Commits are enforced by commitlint (via husky). Pushes to `main` trigger [release-please](https://github.com/googleapis/release-please) which opens or updates a Release PR per tracked package (`apps/server`, `packages/core`, `packages/express`). The `node-workspace` plugin keeps internal `workspace:*` deps in lockstep, cascading a release to dependents when a dependency bumps (`core` → `express` → `server`). `apps/e2e` is private and not tracked. Merging the Release PR cuts the release and git tag.
 
-- **services/json-store.js** - Disk-backed in-memory store; the sole source of truth for resources and subscriptions. Flushes atomically to `./data/subscriptions.json` on an interval and at shutdown.
-- **services/notify-\*.js** - Notification system for subscribers
-- **services/ping.js** - RSS feed update detection and processing
-- **services/please-notify.js** - Subscription management
-
-### API Endpoints (defined in controllers/index.js)
-
-- `/pleaseNotify` - Subscribe to RSS feed notifications
-- `/ping` - Notify server of RSS feed updates
-- `/viewLog` - Event log viewer for debugging
-- `/RPC2` - XML-RPC endpoint
-- Web forms available at `/pleaseNotifyForm` and `/pingForm`
-
-### Configuration
-
-Environment variables (with defaults in config.js):
-
-- `DOMAIN` (default: localhost)
-- `PORT` (default: 5337)
-- `DATA_FILE_PATH` (default: `./data/subscriptions.json`)
-- Resource limits: MAX_RESOURCE_SIZE, REQUEST_TIMEOUT, etc.
-
-### Data Storage
-
-State is persisted to a JSON file (default `./data/subscriptions.json`) managed by services/json-store.js. The store loads into memory at startup and flushes atomically on an interval and at shutdown. No external database is required.
-
-### Testing
-
-- Unit tests in test/ directory using Mocha/Chai
-- Docker-based API testing with mock endpoints
-- Test fixtures and SSL certificates in test/keys/
-
-## Commits and Releases
-
-This project uses [Conventional Commits](https://www.conventionalcommits.org/) enforced by commitlint via husky git hooks.
-
-### Commit Format
-
-```
-type: description
-
-[optional body]
-```
-
-### Commit Types
-
-**Trigger releases:**
-- `fix:` - Bug fixes → patch release (2.2.1 → 2.2.2)
-- `feat:` - New features → minor release (2.2.1 → 2.3.0)
-- `feat!:` or `BREAKING CHANGE:` → major release (2.2.1 → 3.0.0)
-
-**No release triggered:**
-- `chore:` - Maintenance tasks, dependencies
-- `docs:` - Documentation only
-- `style:` - Code style/formatting
-- `refactor:` - Code refactoring
-- `test:` - Adding/updating tests
-- `ci:` - CI/CD changes
-- `build:` - Build system changes
-
-### Release Workflow
-
-1. Push commits to `main`
-2. release-please automatically creates/updates a Release PR
-3. Review the Release PR (contains changelog and version bump)
-4. Merge the Release PR when ready to release
-5. release-please creates GitHub Release and git tag
+`fix:` → patch, `feat:` → minor, `feat!:` / `BREAKING CHANGE:` → major. Other types (`chore:`, `docs:`, `style:`, `refactor:`, `test:`, `ci:`, `build:`) don't trigger releases.