commit 9e30c1dcdff54b52c7ff0a07af974f9a5b5c0379
Author: Tyler Hallada <tyler@hallada.net>
Date:   Sat Aug 15 17:46:19 2026 +0000

    Initial commit: The Daily EPUB full implementation
    
    Full implementation of a personalized daily newspaper delivered as an
    EPUB.
    
    Articles are pulled from a local self-hosted Miniflux instance, enriched
    with comments, summarized and filtered by DeepSeek AI, and then
    assembled into two EPUB editions: standard and optimized for the Xteink
    X4 e-ink reader. Both are served by the local self-hosted BookOrbit OPDS
    server in a separate library. Then the X4 edition is futher converted to
    XTC format and served over a separate OPDS server hosted by the Rust
    binary. Runs are tracked in a local SQLite database so runs are
    idempotent per date.
    
    Full documentation of the plan is in docs/plans and setup and install
    instructions are in the README.md file.

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ae6134c
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,5 @@
+target/
+*.db
+*.sqlite
+out/
+.env
diff --git a/Cargo.lock b/Cargo.lock
new file mode 100644
index 0000000..d4e0240
--- /dev/null
+++ b/Cargo.lock
@@ -0,0 +1,4870 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "aligned"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee4508988c62edf04abd8d92897fca0c2995d907ce1dfeaf369dac3716a40685"
+dependencies = [
+ "as-slice",
+]
+
+[[package]]
+name = "aligned-vec"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc890384c8602f339876ded803c97ad529f3842aba97f6392b3dba0dd171769b"
+dependencies = [
+ "equator",
+]
+
+[[package]]
+name = "allocator-api2"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
+
+[[package]]
+name = "ammonia"
+version = "4.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc6d763210e2eb7670d1a5183a08bebefa3f97db2a738a684f2ce00bd49f681d"
+dependencies = [
+ "cssparser",
+ "html5ever",
+ "maplit",
+ "url",
+]
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae221649c9976a6f6c56ae1facf410f3ddb33cc661c4b7b61020a912d4237fbc"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
+
+[[package]]
+name = "arbitrary"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d036a3c4ab069c7b410a2ce876bd74808d2d0888a82667669f8e783a898bf1"
+dependencies = [
+ "derive_arbitrary",
+]
+
+[[package]]
+name = "arg_enum_proc_macro"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ae92a5119aa49cdbcf6b9f893fe4e1d98b04ccbf82ee0584ad948a44a734dea"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3fb67a6e08acf24fdeccbac2cb6ac4305825bd1f117462e0e6f2f193345ad56"
+
+[[package]]
+name = "as-slice"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "516b6b4f0e40d50dcda9365d53964ec74560ad4284da2e7fc97122cd83174516"
+dependencies = [
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "askama"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1bf825125edd887a019d0a3a837dcc5499a68b0d034cc3eb594070c3e18addc"
+dependencies = [
+ "askama_macros",
+ "itoa",
+ "percent-encoding",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "askama_derive"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1c7065972a130eafa84215f21352ae15b4a7393da48c1f5e103904490736738"
+dependencies = [
+ "askama_parser",
+ "basic-toml",
+ "glob",
+ "memchr",
+ "proc-macro2",
+ "quote",
+ "rustc-hash",
+ "serde",
+ "serde_derive",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "askama_macros"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e23b1d2c4bd39a41971f6124cef4cc6fd0540913ecb90919b69ab3bbe44ae1a"
+dependencies = [
+ "askama_derive",
+]
+
+[[package]]
+name = "askama_parser"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7db09fde9143e7ac4513358fb32ee32847125b63b18ea715afd487956da715da"
+dependencies = [
+ "rustc-hash",
+ "serde",
+ "serde_derive",
+ "unicode-ident",
+ "winnow 1.0.4",
+]
+
+[[package]]
+name = "async-compression"
+version = "0.4.43"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3976abdc8fe7d1133d43d304afd42abdf5bc3e1319d263d223bde07b5efc4be8"
+dependencies = [
+ "compression-codecs",
+ "compression-core",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "atoi"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f28d99ec8bfea296261ca1af174f24225171fea9664ba9003cbebee704810528"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "atomic"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89cbf775b137e9b968e67227ef7f775587cde3fd31b0d8599dbd0f598a48340"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "av-scenechange"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f321d77c20e19b92c39e7471cf986812cbb46659d2af674adc4331ef3f18394"
+dependencies = [
+ "aligned",
+ "anyhow",
+ "arg_enum_proc_macro",
+ "arrayvec",
+ "log",
+ "num-rational",
+ "num-traits",
+ "pastey",
+ "rayon",
+ "thiserror",
+ "v_frame",
+ "y4m",
+]
+
+[[package]]
+name = "av1-grain"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cfddb07216410377231960af4fcab838eaa12e013417781b78bd95ee22077f8"
+dependencies = [
+ "anyhow",
+ "arrayvec",
+ "log",
+ "nom",
+ "num-rational",
+ "v_frame",
+]
+
+[[package]]
+name = "avif-serialize"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7178fe5f7d460b13895ebb9dcb28a3a6216d2df2574a0806cb51b555d297f38"
+dependencies = [
+ "arrayvec",
+]
+
+[[package]]
+name = "aws-lc-rs"
+version = "1.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce2b2dcc879c3bae0d371e77c99f2238400ef24ec001394befa67b6e543add9e"
+dependencies = [
+ "aws-lc-sys",
+ "zeroize",
+]
+
+[[package]]
+name = "aws-lc-sys"
+version = "0.44.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f09fae7be8bb3174e05c6afdb34199e6dc0c7c04ba9fa237b1967adfbde27483"
+dependencies = [
+ "cc",
+ "cmake",
+ "dunce",
+ "fs_extra",
+ "pkg-config",
+]
+
+[[package]]
+name = "axum"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "31b698c5f9a010f6573133b09e0de5408834d0c82f8d7475a89fc1867a71cd90"
+dependencies = [
+ "axum-core",
+ "bytes",
+ "form_urlencoded",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "itoa",
+ "matchit",
+ "memchr",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "serde_core",
+ "serde_json",
+ "serde_path_to_error",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "axum-core"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08c78f31d7b1291f7ee735c1c6780ccde7785daae9a9206026862dab7d8792d1"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "http-body-util",
+ "mime",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64"
+version = "0.23.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
+
+[[package]]
+name = "basic-toml"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba62675e8242a4c4e806d12f11d136e626e6c8361d6b829310732241652a178a"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "bit-set"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+dependencies = [
+ "bit-vec",
+]
+
+[[package]]
+name = "bit-vec"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+
+[[package]]
+name = "bit_field"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e4b40c7323adcfc0a41c4b88143ed58346ff65a288fc144329c5c45e05d70c6"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "bitstream-io"
+version = "4.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7eff00be299a18769011411c9def0d827e8f2d7bf0c3dbf53633147a8867fd1f"
+dependencies = [
+ "no_std_io2",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2f6c7dbe95a6ed67ad9f18e57daf93a2f034c524b99fd2b76d18fdfeb6660aa"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "built"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c0e531d93d39c34eef561e929e8a7f86d77a5af08aac4f6d6e39976c51858e9"
+
+[[package]]
+name = "bumpalo"
+version = "3.20.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
+
+[[package]]
+name = "bytemuck"
+version = "1.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95832e849adfb21180ccb6826a99da14e5d266ae5c2e668e1602cf234f153797"
+dependencies = [
+ "bytemuck_derive",
+]
+
+[[package]]
+name = "bytemuck_derive"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0e56a716f1e132ff6bf4bdac1c944a3fcdc1cae65f70a4a2a1ac3b401d2d1f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "byteorder-lite"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f1fe948ff07f4bd06c30984e69f5b4899c516a3ef74f34df92a2df2ab535495"
+
+[[package]]
+name = "bytes"
+version = "1.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
+
+[[package]]
+name = "cc"
+version = "1.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "509591b7bcd67f4ef775afad7662703b4935daaa6ec0e5605cfb1090b32a2b6d"
+dependencies = [
+ "find-msvc-tools",
+ "jobserver",
+ "libc",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f079e83a288787bcd14a6aea84cee5c87a67c5a3e660c30f557a3d24761b3527"
+
+[[package]]
+name = "chacha20"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "chrono"
+version = "0.4.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1aa79e62e7697b8e29b513a68abacf485adcd1fe8284a4316c5ae868e6633327"
+dependencies = [
+ "iana-time-zone",
+ "js-sys",
+ "num-traits",
+ "wasm-bindgen",
+ "windows-link",
+]
+
+[[package]]
+name = "clap"
+version = "4.6.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "473c7e07f409a8d772161724aa8db6a765a2532a70f9667eeb7b49d3d02fbdca"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b48fea5a88e9ae728a2dcbedbfc0e730f7d60da42e1cb049a83c9fb8b789889"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d012d2b9d65aca7f18f4d9878a045bc17899bba951561ba5ec3c2ba1eed9a061"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "cmake"
+version = "0.1.58"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0f78a02292a74a88ac736019ab962ece0bc380e3f977bf72e376c5d78ff0678"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "cmov"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c9ea0ac24bc397ab3c98583a3c9ba74fa56b09a4449bbe172b9b1ddb016027a"
+
+[[package]]
+name = "color_quant"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d7b894f5411737b7867f4827955924d7c254fc9f4d91a6aad6b097804b1018b"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "combine"
+version = "4.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "compression-codecs"
+version = "0.4.38"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce2548391e9c1929c21bf6aa2680af86fe4c1b33e6cea9ac1cfeec0bd11218cf"
+dependencies = [
+ "compression-core",
+ "flate2",
+ "memchr",
+]
+
+[[package]]
+name = "compression-core"
+version = "0.4.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc14f565cf027a105f7a44ccf9e5b424348421a1d8952a8fc9d499d313107789"
+
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
+[[package]]
+name = "core-foundation"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5eb8a2a1cd12ab0d987a5d5e825195d372001a4094a0376319d5a0ad71c1ba0d"
+dependencies = [
+ "crc-catalog",
+]
+
+[[package]]
+name = "crc-catalog"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "217698eaf96b4a3f0bc4f3662aaa55bdf913cd54d7204591faa790070c6d0853"
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "crossbeam-deque"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5181e0de7b61eb03a81e347d6dd8797bae9da5146707b51077e2d71a54ec0ceb"
+dependencies = [
+ "crossbeam-epoch",
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-epoch"
+version = "0.9.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-queue"
+version = "0.3.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "803d13fb3b09d88be9f4dbc29062c66b19bf7170867ceb746d2a8689bf6c7a26"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61803da095bee82a81bb1a452ecc25d3b2f1416d1897eb86430c6159ef717c17"
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce6e4c961d6cd6c9a86db418387425e8bdeaf05b3c8bc1411e6dca4c252f1453"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "cssparser"
+version = "0.37.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c9cdaae01d5ed7882b04d795e7f752f46ff52d2fa3b50a20d28c464510bba98"
+dependencies = [
+ "cssparser-macros",
+ "dtoa-short",
+ "itoa",
+ "phf",
+ "smallvec",
+]
+
+[[package]]
+name = "cssparser-macros"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10a2a99df6e410a8ff4245aa2006499ea662245f967cc7c0a38c83ef8eb44dbf"
+dependencies = [
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "ctutils"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d5515a3834141de9eafb9717ad39eea8247b5674e6066c404e8c4b365d2a29e"
+dependencies = [
+ "cmov",
+]
+
+[[package]]
+name = "daily-epub"
+version = "0.1.0"
+dependencies = [
+ "ammonia",
+ "anyhow",
+ "askama",
+ "axum",
+ "base64 0.23.1",
+ "clap",
+ "dom_smoothie",
+ "epub-builder",
+ "figment",
+ "futures",
+ "hex",
+ "hmac",
+ "image",
+ "jiff",
+ "rand 0.10.2",
+ "reqwest",
+ "resvg",
+ "scraper",
+ "serde",
+ "serde_json",
+ "sha2 0.11.0",
+ "sqlx",
+ "tempfile",
+ "thiserror",
+ "tiny-skia",
+ "tokio",
+ "tokio-util",
+ "tower-http 0.7.0",
+ "tracing",
+ "tracing-subscriber",
+ "url",
+ "zip",
+]
+
+[[package]]
+name = "data-url"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be1e0bca6c3637f992fc1cc7cbc52a78c1ef6db076dbf1059c4323d6a2048376"
+
+[[package]]
+name = "defmt"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2953bfe4f93bbd20cc71198842756f77d161884c99ebbabc41d80231ded88d1"
+dependencies = [
+ "bitflags 1.3.2",
+ "defmt-macros",
+]
+
+[[package]]
+name = "defmt-macros"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bad9c72e7ca2137e0dc3813245a0d282fd6daad32fd800af018306a9169b5fe8"
+dependencies = [
+ "defmt-parser",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "defmt-parser"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e"
+dependencies = [
+ "thiserror",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
+
+[[package]]
+name = "derive_arbitrary"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e567bd82dcff979e4b03460c307b3cdc9e96fde3d73bed1496d2bc75d9dd62a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer 0.10.4",
+ "crypto-common 0.1.7",
+]
+
+[[package]]
+name = "digest"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1dd6dbb5841937940781866fa1281a1ff7bd3bf827091440879f9994983d5c2"
+dependencies = [
+ "block-buffer 0.12.1",
+ "const-oid",
+ "crypto-common 0.2.2",
+ "ctutils",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6232dd377dcc64799954cbd3a9bb882e9cdc1308ccd87b1c098f1fb2eaf82a8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "dom_query"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fac5fca71e65e94cc718a6e2af65d6e0f9c6027751c2aa562fbb5087fda639bc"
+dependencies = [
+ "bit-set",
+ "cssparser",
+ "foldhash",
+ "html5ever",
+ "nom",
+ "precomputed-hash",
+ "selectors",
+ "tendril",
+]
+
+[[package]]
+name = "dom_smoothie"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8b9b294aabb8010b37c49a07d6f82175152f4927855d534979a38737721875"
+dependencies = [
+ "dom_query",
+ "flagset",
+ "foldhash",
+ "gjson",
+ "html-escape",
+ "once_cell",
+ "phf",
+ "tendril",
+ "thiserror",
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "dotenvy"
+version = "0.15.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1aaf95b3e5c8f23aa320147307562d361db0ae0d51242340f558153b4eb2439b"
+
+[[package]]
+name = "dtoa"
+version = "1.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c3cf4824e2d5f025c7b531afcb2325364084a16806f6d47fbc1f5fbd9960590"
+
+[[package]]
+name = "dtoa-short"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd1511a7b6a56299bd043a9c167a6d2bfb37bf84a6dfceaba651168adfb43c87"
+dependencies = [
+ "dtoa",
+]
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "ego-tree"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b04dc5a38e4f151a79d9f2451ae6037fb6eaf5cba34771f44781f80e508498e3"
+
+[[package]]
+name = "either"
+version = "1.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5e8f6c15a24b9a3ee5efec809ccd006d3b30e8b3bb63c39af737c7f87daa1d"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "encoding_rs"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "epub-builder"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8598e641a211c4e43dbef0872e7fa2455c739d6eabd3456967b47a7f8923cb49"
+dependencies = [
+ "chrono",
+ "html-escape",
+ "log",
+ "once_cell",
+ "tempfile",
+ "thiserror",
+ "upon",
+ "uuid",
+ "zip",
+]
+
+[[package]]
+name = "equator"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4711b213838dfee0117e3be6ac926007d7f433d7bbe33595975d4190cb07e6fc"
+dependencies = [
+ "equator-macro",
+]
+
+[[package]]
+name = "equator-macro"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44f23cf4b44bfce11a86ace86f8a73ffdec849c9fd00a386a53d278bd9e81fb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "etcetera"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de48cc4d1c1d97a20fd819def54b890cadde72ed3ad0c614822a0a433361be96"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "euclid"
+version = "0.22.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1a05365e3b1c6d1650318537c7460c6923f1abdd272ad6842baa2b509957a06"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "event-listener"
+version = "5.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2"
+dependencies = [
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "exr"
+version = "1.74.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "711fe42c9964295e01ee3fba3f9fe0e1d24b98886950d68efe81b1c76e21adf3"
+dependencies = [
+ "bit_field",
+ "half",
+ "lebe",
+ "miniz_oxide",
+ "num-complex",
+ "pulp",
+ "rayon-core",
+ "smallvec",
+ "zune-inflate",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223"
+
+[[package]]
+name = "fax"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caf1079563223d5d59d83c85886a56e586cfd5c1a26292e971a0fa266531ac5a"
+
+[[package]]
+name = "fdeflate"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
+dependencies = [
+ "simd-adler32",
+]
+
+[[package]]
+name = "figment"
+version = "0.10.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cb01cd46b0cf372153850f4c6c272d9cbea2da513e07538405148f95bd789f3"
+dependencies = [
+ "atomic",
+ "parking_lot",
+ "pear",
+ "serde",
+ "tempfile",
+ "toml",
+ "uncased",
+ "version_check",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d45db016d36b838f563236e9193d0ee6ce38f3f68b6c94e914b4929c96bbb890"
+
+[[package]]
+name = "flagset"
+version = "0.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7ac824320a75a52197e8f2d787f6a38b6718bb6897a35142d749af3c0e8f4fe"
+
+[[package]]
+name = "flate2"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+ "zlib-rs",
+]
+
+[[package]]
+name = "float-cmp"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "98de4bbd547a563b716d8dfa9aad1cb19bfab00f4fa09a6a4ed21dbcf44ce9c4"
+
+[[package]]
+name = "flume"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e139bc46ca777eb5efaf62df0ab8cc5fd400866427e56c68b22e414e53bd3be"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "spin",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "font-types"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75382bc7392ef10aad10935f92fc3db36d2d4dad0e5d96d8d65e04f89a07ec39"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "fontconfig-parser"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbc773e24e02d4ddd8395fd30dc147524273a83e54e0f312d986ea30de5f5646"
+dependencies = [
+ "roxmltree 0.20.0",
+]
+
+[[package]]
+name = "fontdb"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2660c5e9157bf76d2db1294e4a9feba604ef610819a3b591088d0d8392a3290f"
+dependencies = [
+ "fontconfig-parser",
+ "log",
+ "memmap2",
+ "slotmap",
+ "tinyvec",
+]
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "fs_extra"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c"
+
+[[package]]
+name = "futures"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a31d2a3fbaaeb2af2368bbdd904aa8e812d3c04a1ee10d3171f52d556e5d0a3"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1f9e3d69d39e4862ffed03ed071a76f9a13ba1d9109d355b0f0aa6b15e393c4"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "031b47cf1a3c6cc8bc2fc76cd437f521619387907d469316e7c0bc278f1f5432"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-intrusive"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d930c203dd0b6ff06e0201a4a2fe9149b43c684fd4420555b26d21b1a02956f"
+dependencies = [
+ "futures-core",
+ "lock_api",
+ "parking_lot",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53c0fa8157de1303bfffdaa1cc2a673bfffb60102f76b0ef4441659124373fed"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1944426bf7d03f1d14f708785e4b33efd750b36d48a157b836b3efc15ede8e1d"
+
+[[package]]
+name = "futures-task"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd"
+
+[[package]]
+name = "futures-util"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "getopts"
+version = "0.2.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfe4fbac503b8d1f88e6676011885f34b7174f46e59956bba534ba83abded4df"
+dependencies = [
+ "unicode-width",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi 6.0.0",
+ "rand_core 0.10.1",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "gif"
+version = "0.14.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee8cfcc411d9adbbaba82fb72661cc1bcca13e8bba98b364e62b2dba8f960159"
+dependencies = [
+ "color_quant",
+ "weezl",
+]
+
+[[package]]
+name = "gjson"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43503cc176394dd30a6525f5f36e838339b8b5619be33ed9a7783841580a97b6"
+
+[[package]]
+name = "glob"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4eba85ea1d0a966a983acd07deee566e67395d2d96b6fb39e62b5a833f1eb0b"
+
+[[package]]
+name = "h2"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6cb093c84e8bd9b188d4c4a8cb6579fc016968d14c99882163cd3ff402a4f155"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "half"
+version = "2.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
+dependencies = [
+ "cfg-if",
+ "crunchy",
+ "zerocopy",
+]
+
+[[package]]
+name = "harfrust"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c03d949a14aa089bbb282f7dd76a498a7f684428e4257202efc119ec010376f9"
+dependencies = [
+ "bitflags 2.13.1",
+ "bytemuck",
+ "read-fonts",
+ "smallvec",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+dependencies = [
+ "allocator-api2",
+ "equivalent",
+ "foldhash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
+
+[[package]]
+name = "hashlink"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824e001ac4f3012dd16a264bec811403a67ca9deb6c102fc5049b32c4574b35f"
+dependencies = [
+ "hashbrown 0.16.1",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hkdf"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4aaa26c720c68b866f2c96ef5c1264b3e6f473fe5d4ce61cd44bbe913e553018"
+dependencies = [
+ "hmac",
+]
+
+[[package]]
+name = "hmac"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6303bc9732ae41b04cb554b844a762b4115a61bfaa81e3e83050991eeb56863f"
+dependencies = [
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "html-escape"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9356095b4b41197bba32173600e1582792cda618f65d12f68e2e77d273413c5"
+
+[[package]]
+name = "html5ever"
+version = "0.39.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46a1761807faccc9a19e86944bbf40610014066306f96edcdedc2fb714bcb7b8"
+dependencies = [
+ "log",
+ "markup5ever",
+]
+
+[[package]]
+name = "http"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "918d3568bebf352712bc2ef3d46a8bcf1a75b373be6539de198e9105cbbf9ce0"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca2a8f2913ee65f60facd6a5905613afaa448497a0230cc41ce022d93290bc2c"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23169fe34a5fbcdd3f3862e78fb9b6fccd5f02a6dc6f732547005d45631ce71c"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "http-range-header"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9171a2ea8a68358193d15dd5d70c1c10a2afc3e7e4c5bc92bc9f025cebd7359c"
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hybrid-array"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "707114b52a152fa7bdb290cd7cd5912d9467273b6d74e21b8d81aca1f8533f6b"
+dependencies = [
+ "typenum",
+]
+
+[[package]]
+name = "hyper"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d22053281f852e11534f5198498373cbb59295120a20771d90f7ed1897490a72"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "httpdate",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33ca68d021ef39cf6463ab54c1d0f5daf03377b70561305bb89a8f83aab66e0f"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "system-configuration",
+ "tokio",
+ "tower-service",
+ "tracing",
+ "windows-registry",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa68d21081c4a05d5a901a1c62add574c77048b6a1c67be3b50ce0b60d4ca513"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d56e28588da92eee5c3201a6eff33fabdd49b62269c8938d4ff050ce4d900deb"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12f9cf5f235641ed274641dd81c3f28d870e276763d0797aeeab72317b1c646f"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1563da1ed3e0b3bf3d74c9b85917ac9c56464d2f57242270c09c9e752f8021a0"
+
+[[package]]
+name = "icu_properties"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e7ca276ad3145661a65914e6daf131ca5120cd3dcee8f8f3214b8875184a148"
+dependencies = [
+ "displaydoc",
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e590f038c1464a96894fd6d10127e90a8be4509f56ff7ecef851b15cee0b7caa"
+
+[[package]]
+name = "icu_provider"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92a7ed671a6aad807a8651a2e1782a6598fda9ce5185dd8158549e95a91c6428"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "image"
+version = "0.25.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85ab80394333c02fe689eaf900ab500fbd0c2213da414687ebf995a65d5a6104"
+dependencies = [
+ "bytemuck",
+ "byteorder-lite",
+ "color_quant",
+ "exr",
+ "gif",
+ "image-webp",
+ "moxcms",
+ "num-traits",
+ "png",
+ "qoi",
+ "ravif",
+ "rayon",
+ "rgb",
+ "tiff",
+ "zune-core",
+ "zune-jpeg",
+]
+
+[[package]]
+name = "image-webp"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "525e9ff3e1a4be2fbea1fdf0e98686a6d98b4d8f937e1bf7402245af1909e8c3"
+dependencies = [
+ "byteorder-lite",
+ "quick-error",
+]
+
+[[package]]
+name = "imagesize"
+version = "0.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65b27460c2c92b037f3f94c538ed9a3342f3fdf923606781629ccb35f82d042a"
+
+[[package]]
+name = "imgref"
+version = "1.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89194689a993ab15268672e99e7b0e19da2da3268ac682e8f02d29d4d1434cd7"
+
+[[package]]
+name = "indexmap"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.17.1",
+]
+
+[[package]]
+name = "inlinable_string"
+version = "0.1.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8fae54786f62fb2918dcfae3d568594e50eb9b5c25bf04371af6fe7516452fb"
+
+[[package]]
+name = "interpolate_name"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c34819042dc3d3971c46c2190835914dfbe0c3c13f61449b2997f4e9722dfa60"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a756c3fac73139e83f14c2d742155dd2b78d3ee56597b419a0579b7bdd6dd78"
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itertools"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "jiff"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "668b7183bd07af9a4885f5c35b0cc5c83c4607a913c16b7e17291832910d2dcc"
+dependencies = [
+ "defmt",
+ "jiff-core",
+ "jiff-static",
+ "jiff-tzdb-platform",
+ "log",
+ "portable-atomic",
+ "portable-atomic-util",
+ "serde_core",
+ "windows-link",
+]
+
+[[package]]
+name = "jiff-core"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7feca88439efe53da3754500c1851dedf3cb36c524dd5cf8225cc0794de95d09"
+dependencies = [
+ "defmt",
+]
+
+[[package]]
+name = "jiff-static"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a69dcb3a21cfb32ce1cd056169337ca284af0766dd766e7878819b251a49204"
+dependencies = [
+ "jiff-core",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "jiff-tzdb"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "142bd39932ad231f10513df9ab62661fead8719872150b7ad02a2df79f4e141e"
+
+[[package]]
+name = "jiff-tzdb-platform"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
+dependencies = [
+ "jiff-tzdb",
+]
+
+[[package]]
+name = "jni"
+version = "0.22.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5efd9a482cf3a427f00d6b35f14332adc7902ce91efb778580e180ff90fa3498"
+dependencies = [
+ "cfg-if",
+ "combine",
+ "jni-macros",
+ "jni-sys",
+ "log",
+ "simd_cesu8",
+ "thiserror",
+ "walkdir",
+ "windows-link",
+]
+
+[[package]]
+name = "jni-macros"
+version = "0.22.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a00109accc170f0bdb141fed3e393c565b6f5e072365c3bd58f5b062591560a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "simd_cesu8",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6377a88cb3910bee9b0fa88d4f42e1d2da8e79915598f65fb0c7ee14c878af2"
+dependencies = [
+ "jni-sys-macros",
+]
+
+[[package]]
+name = "jni-sys-macros"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38c0b942f458fe50cdac086d2f946512305e5631e720728f2a61aabcd47a6264"
+dependencies = [
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "jobserver"
+version = "0.1.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c00acbd29eabad4a2392fa0e921c874934dbbf4194312ad20f04a0ed67a3cb3"
+dependencies = [
+ "getrandom 0.4.3",
+ "libc",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e0c1080212aad755ea003d18543e8768dd432c48819efd73a7bf1e39b7a5a3a"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "kurbo"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b60dfc32f652b926df6192e55525b16d186c69d47876c3ead4da5cc9f8450e2"
+dependencies = [
+ "arrayvec",
+ "euclid",
+ "polycool",
+ "smallvec",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "lebe"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a79a3332a6609480d7d0c9eab957bca6b455b91bb84e66d19f5ff66294b85b8"
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "libfuzzer-sys"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9fd2f41a1cba099f79a0b6b6c35656cf7c03351a7bae8ff0f28f25270f929d2"
+dependencies = [
+ "arbitrary",
+ "cc",
+]
+
+[[package]]
+name = "libm"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
+
+[[package]]
+name = "libsqlite3-sys"
+version = "0.37.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1f111c8c41e7c61a49cd34e44c7619462967221a6443b0ec299e0ac30cfb9b1"
+dependencies = [
+ "cc",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47d9d19d1d6efa0109d2f65ff4c85cddd50bd572e5a00127ab10987290bcefae"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.33"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ceec5bc11778974d1bcb055b18002eba7f4b3518b6a0081b3af5f21666da9ad"
+
+[[package]]
+name = "loop9"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fae87c125b03c1d2c0150c90365d7d6bcc53fb73a9acaef207d2d065860f062"
+dependencies = [
+ "imgref",
+]
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "maplit"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e2e65a1a2e43cfcb47a895c4c8b10d1f4a61097f9f254f183aee60cad9c651d"
+
+[[package]]
+name = "markup5ever"
+version = "0.39.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7122d987ec5f704ee56f6e5b41a7d93722e9aae27ae07cafa4036c4d3f9757de"
+dependencies = [
+ "log",
+ "tendril",
+ "web_atoms",
+]
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "matchit"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47e1ffaa40ddd1f3ed91f717a33c8c0ee23fff369e3aa8772b9605cc1d22f4c3"
+
+[[package]]
+name = "maybe-rayon"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ea1f30cedd69f0a2954655f7188c6a834246d2bcf1e315e2ac40c4b24dc9519"
+dependencies = [
+ "cfg-if",
+ "rayon",
+]
+
+[[package]]
+name = "md-5"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69b6441f590336821bb897fb28fc622898ccceb1d6cea3fde5ea86b090c4de98"
+dependencies = [
+ "cfg-if",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "memmap2"
+version = "0.9.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1219ed1b7f229ee7104d281dd01d6802fe28bb6e95d292942c4daacdeb798c0"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "mime"
+version = "0.3.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+
+[[package]]
+name = "mime_guess"
+version = "2.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f7c44f8e672c00fe5308fa235f821cb4198414e1c77935c1ab6948d3fd78550e"
+dependencies = [
+ "mime",
+ "unicase",
+]
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30d65c71f1ce40ab09135ce117d742b9f8a19ff91a41a8b57ed50bc2de59c427"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "moxcms"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb85c154ba489f01b25c0d36ae69a87e4a1c73a72631fc6c0eb6dde34a73e44b"
+dependencies = [
+ "num-traits",
+ "pxfm",
+]
+
+[[package]]
+name = "new_debug_unreachable"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "650eef8c711430f1a879fdd01d4745a7deea475becfb90269c06775983bbf086"
+
+[[package]]
+name = "no_std_io2"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "418abd1b6d34fbf6cae440dc874771b0525a604428704c76e48b29a5e67b8003"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "nom"
+version = "8.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df9761775871bdef83bee530e60050f7e54b1105350d6884eb0fb4f46c2f9405"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "noop_proc_macro"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0676bb32a98c1a483ce53e500a81ad9c3d5b3f7c920c28c24e9cb0980d0b5bc8"
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c89e69e7e0f03bea5ef08013795c25018e101932225a656383bd384495ecc367"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-complex"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73f88a1307638156682bada9d7604135552957b7818057dcef22705b4d509495"
+dependencies = [
+ "bytemuck",
+ "num-traits",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521739c6d2bac4aa25192232afe6841231376b2b26d4d9fae5ecf8ca5772e441"
+
+[[package]]
+name = "num-derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed3955f1a9c7c0c15e092f9c887db08b1fc683305fdf6eb6684f22555355e202"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "num-integer"
+version = "0.1.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ce2d95d4b3734dc35aa2f45e1aa22cd416814592a4f9d9205e11affd5b8e10b"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-rational"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f83d14da390562dca69fc84082e73e548e1ad308d24accdedd2720017cb37824"
+dependencies = [
+ "num-bigint",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "openssl-probe"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link",
+]
+
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "pastey"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "35fb2e5f958ec131621fdd531e9fc186ed768cbe395337403ae56c17a74c68ec"
+
+[[package]]
+name = "pear"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdeeaa00ce488657faba8ebf44ab9361f9365a97bd39ffb8a60663f57ff4b467"
+dependencies = [
+ "inlinable_string",
+ "pear_codegen",
+ "yansi",
+]
+
+[[package]]
+name = "pear_codegen"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4bab5b985dc082b345f812b7df84e1bef27e7207b39e448439ba8bd69c93f147"
+dependencies = [
+ "proc-macro2",
+ "proc-macro2-diagnostics",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "phf"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c1562dc717473dbaa4c1f85a36410e03c047b2e7df7f45ee938fbef64ae7fadf"
+dependencies = [
+ "phf_macros",
+ "phf_shared",
+ "serde",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49aa7f9d80421bca176ca8dbfebe668cc7a2684708594ec9f3c0db0805d5d6e1"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "135ace3a761e564ec88c03a77317a7c6b80bb7f7135ef2544dbe054243b89737"
+dependencies = [
+ "fastrand",
+ "phf_shared",
+]
+
+[[package]]
+name = "phf_macros"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812f032b54b1e759ccd5f8b6677695d5268c588701effba24601f6932f8269ef"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e57fef6bc5981e38c2ce2d63bfa546861309f875b8a75f092d1d54ae2d64f266"
+dependencies = [
+ "siphasher",
+]
+
+[[package]]
+name = "pico-args"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5be167a7af36ee22fe3115051bc51f6e6c7054c9348e28deb4f49bd6f705a315"
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "pkg-config"
+version = "0.3.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6b464fbc74e149a392436b17d523f769e057cb6877f6a5c4618bc6f11800548"
+
+[[package]]
+name = "png"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61"
+dependencies = [
+ "bitflags 2.13.1",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "polycool"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50596ddc09eb5ad5f75cacd40209568e66df71baf86e1499a0e99c4cff12a5a6"
+dependencies = [
+ "arrayvec",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05c8b63e8d9609db387f0324918f81d68fe27748f084ef092fb35954d0539a85"
+
+[[package]]
+name = "portable-atomic-util"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a106d1259c23fac8e543272398ae0e3c0b8d33c88ed73d0cc71b0f1d902618"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d83eb9bc6d8e5cf568e7a1101d60ee05e81ed50ea106026f3d18deeb046d7661"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "precomputed-hash"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "proc-macro2-diagnostics"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af066a9c399a26e020ada66a034357a868728e72cd426f3adcd35f80d88d88c8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "version_check",
+ "yansi",
+]
+
+[[package]]
+name = "profiling"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d595e54a326bc53c1c197b32d295e14b169e3cfeaa8dc82b529f947fba6bcf5"
+dependencies = [
+ "profiling-procmacros",
+]
+
+[[package]]
+name = "profiling-procmacros"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4488a4a36b9a4ba6b9334a32a39971f77c1436ec82c38707bce707699cc3bbcb"
+dependencies = [
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "pulp"
+version = "0.22.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "046aa45b989642ec2e4717c8e72d677b13edd831a4d3b6cf37d9a3e54912496a"
+dependencies = [
+ "bytemuck",
+ "cfg-if",
+ "libm",
+ "num-complex",
+ "paste",
+ "pulp-wasm-simd-flag",
+ "raw-cpuid",
+ "reborrow",
+ "version_check",
+]
+
+[[package]]
+name = "pulp-wasm-simd-flag"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d8f70e07b9c3962945a74e59ca1c511bba65b6419468acc217c457d93f3c740"
+
+[[package]]
+name = "pxfm"
+version = "0.1.30"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d55d956fa96f5ec02be2e13af0e20391a5aa83d6a074e3ad368959d0fab299ea"
+
+[[package]]
+name = "qoi"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f6d64c71eb498fe9eae14ce4ec935c555749aef511cca85b5568910d6e48001"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "quick-error"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a993555f31e5a609f617c12db6250dedcac1b0a85076912c436e6fc9b2c8e6a3"
+
+[[package]]
+name = "quinn"
+version = "0.11.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c1a41e437b6bbd489372cd4971de128e85c855f56c57f283d20ff016cf7c0a8"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2",
+ "thiserror",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f4bfc015262b9df63c8845072ce59068853ff5872180c2ce2f13038b970e560"
+dependencies = [
+ "aws-lc-rs",
+ "bytes",
+ "getrandom 0.4.3",
+ "lru-slab",
+ "rand 0.10.2",
+ "rand_pcg",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "35a133f956daabe89a61a685c2649f13d82d5aa4bd5d12d1277e1072a21c0694"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2",
+ "tracing",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "rand"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
+dependencies = [
+ "rand_chacha",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7f5fa3a058cd35567ef9bfa5e75732bee0f9e4c55fa90477bef2dfcdbc4be80"
+dependencies = [
+ "chacha20",
+ "getrandom 0.4.3",
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63b8176103e19a2643978565ca18b50549f6101881c443590420e4dc998a3c69"
+
+[[package]]
+name = "rand_pcg"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "caa0f4137e1c0a72f4c651489402276c8e8e1cf081f3b0ba156d2cbeef09e86a"
+dependencies = [
+ "rand_core 0.10.1",
+]
+
+[[package]]
+name = "rav1e"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43b6dd56e85d9483277cde964fd1bdb0428de4fec5ebba7540995639a21cb32b"
+dependencies = [
+ "aligned-vec",
+ "arbitrary",
+ "arg_enum_proc_macro",
+ "arrayvec",
+ "av-scenechange",
+ "av1-grain",
+ "bitstream-io",
+ "built",
+ "cfg-if",
+ "interpolate_name",
+ "itertools",
+ "libc",
+ "libfuzzer-sys",
+ "log",
+ "maybe-rayon",
+ "new_debug_unreachable",
+ "noop_proc_macro",
+ "num-derive",
+ "num-traits",
+ "paste",
+ "profiling",
+ "rand 0.9.5",
+ "rand_chacha",
+ "simd_helpers",
+ "thiserror",
+ "v_frame",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "ravif"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e52310197d971b0f5be7fe6b57530dcd27beb35c1b013f29d66c1ad73fbbcc45"
+dependencies = [
+ "avif-serialize",
+ "imgref",
+ "loop9",
+ "quick-error",
+ "rav1e",
+ "rayon",
+ "rgb",
+]
+
+[[package]]
+name = "raw-cpuid"
+version = "11.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "498cd0dc59d73224351ee52a95fee0f1a617a2eae0e7d9d720cc622c73a54186"
+dependencies = [
+ "bitflags 2.13.1",
+]
+
+[[package]]
+name = "rayon"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb39b166781f92d482534ef4b4b1b2568f42613b53e5b6c160e24cfbfa30926d"
+dependencies = [
+ "either",
+ "rayon-core",
+]
+
+[[package]]
+name = "rayon-core"
+version = "1.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22e18b0f0062d30d4230b2e85ff77fdfe4326feb054b9783a3460d8435c8ab91"
+dependencies = [
+ "crossbeam-deque",
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "read-fonts"
+version = "0.41.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "046a7d674daf459825b32f5062056d6882db0d2f5a479fbd76ccfc870ac18709"
+dependencies = [
+ "bytemuck",
+ "font-types",
+ "once_cell",
+]
+
+[[package]]
+name = "reborrow"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03251193000f4bd3b042892be858ee50e8b3719f2b08e5833ac4353724632430"
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.13.1",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "reqwest"
+version = "0.13.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "219c5811de6525e5416c7d5d53bb656d3afdbc6c5af816e0802bcfa42dbdc1c3"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "encoding_rs",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "rustls-platform-verifier",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tower",
+ "tower-http 0.6.11",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "resvg"
+version = "0.48.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67e3803f97b999e80cbf7c6ecdd07a8102204d92e1633cf48783720c521196bd"
+dependencies = [
+ "bytemuck",
+ "gif",
+ "image-webp",
+ "log",
+ "pico-args",
+ "rgb",
+ "svgtypes",
+ "tiny-skia",
+ "usvg",
+ "zune-jpeg",
+]
+
+[[package]]
+name = "rgb"
+version = "0.8.53"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b34b781b31e5d73e9fbc8689c70551fd1ade9a19e3e28cfec8580a79290cc4"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "roxmltree"
+version = "0.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c20b6793b5c2fa6553b250154b78d6d0db37e72700ae35fad9387a46f487c97"
+
+[[package]]
+name = "roxmltree"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1964b10c76125c36f8afe190065a4bf9a87bf324842c05701330bba9f1cacbb"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b1e7f9a428571be2dc5bc0505c13fb6bf936822b894ec87abf8a08a4e51742d"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags 2.13.1",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.43"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0283386ce02abc0151e1761d08802dfe86c173b0b494af5cbc086574e453da06"
+dependencies = [
+ "aws-lc-rs",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-native-certs"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dab5152771c58876a2146916e53e35057e1a4dfa2b9df0f0305b07f611fdea4d"
+dependencies = [
+ "openssl-probe",
+ "rustls-pki-types",
+ "schannel",
+ "security-framework",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f4925028c7eb5d1fcdaf196971378ed9d2c1c4efc7dc5d011256f76c99c0a96"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-platform-verifier"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d1e2536ce4f35f4846aa13bff16bd0ff40157cdb14cc056c7b14ba41233ba0"
+dependencies = [
+ "core-foundation 0.10.1",
+ "core-foundation-sys",
+ "jni",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-platform-verifier-android",
+ "rustls-webpki",
+ "security-framework",
+ "security-framework-sys",
+ "webpki-root-certs",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls-platform-verifier-android"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0527518605e68109d875e248ea259b6758801cf165e4b2c2733ae3b51f12535a"
+dependencies = [
+ "aws-lc-rs",
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "schannel"
+version = "0.1.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91c1b7e4904c873ef0710c1f407dde2e6287de2bebc1bbbf7d430bb7cbffd939"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "scraper"
+version = "0.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdd0be4d296f048bfb06dd01bbc80ef789ddd2e55583e8d2e6b804942abfabc2"
+dependencies = [
+ "cssparser",
+ "ego-tree",
+ "getopts",
+ "html5ever",
+ "precomputed-hash",
+ "selectors",
+ "tendril",
+]
+
+[[package]]
+name = "security-framework"
+version = "3.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation 0.10.1",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "selectors"
+version = "0.38.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8adfa1c298912827b8a28b223b3b874357397ae706e6190acd9bf28cee99114d"
+dependencies = [
+ "bitflags 2.13.1",
+ "cssparser",
+ "derive_more",
+ "log",
+ "new_debug_unreachable",
+ "phf",
+ "phf_codegen",
+ "precomputed-hash",
+ "rustc-hash",
+ "servo_arc",
+ "smallvec",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
+
+[[package]]
+name = "serde"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.151"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_path_to_error"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10a9ff822e371bb5403e391ecd83e182e0e77ba7f6fe0160b795797109d1b457"
+dependencies = [
+ "itoa",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "servo_arc"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "170fb83ab34de17dc69aa7c67482b22218ddb85da56546f9bd6b929e32a05930"
+dependencies = [
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "sha1"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aacc4cc499359472b4abe1bf11d0b12e688af9a805fa5e3016f9a386dc2d0214"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha2"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "446ba717509524cb3f22f17ecc096f10f4822d76ab5c0b9822c5f9c284e825f4"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "digest 0.11.3",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a219298ac11a56ea9a6d2120044824d6f01aeb034955e7af7bc16858527deea"
+
+[[package]]
+name = "simd_cesu8"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11031e251abf8611c80f460e19dbdeb54a66db918e49c65a7065b46ac7aec520"
+dependencies = [
+ "rustc_version",
+ "simdutf8",
+]
+
+[[package]]
+name = "simd_helpers"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95890f873bec569a0362c235787f3aca6e1e887302ba4840839bcc6459c42da6"
+dependencies = [
+ "quote",
+]
+
+[[package]]
+name = "simdutf8"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
+
+[[package]]
+name = "simplecss"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a9c6883ca9c3c7c90e888de77b7a5c849c779d25d74a1269b0218b14e8b136c"
+dependencies = [
+ "log",
+]
+
+[[package]]
+name = "siphasher"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ee5873ec9cce0195efcb7a4e9507a04cd49aec9c83d0389df45b1ef7ba2e649"
+
+[[package]]
+name = "skrifa"
+version = "0.44.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819ab7d62b1d3e72d9d9dea5650bac30424f9111364bb94928dbf5ecad1baa68"
+dependencies = [
+ "bytemuck",
+ "read-fonts",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "slotmap"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdd58c3c93c3d278ca835519292445cb4b0d4dc59ccfdf7ceadaab3f8aeb4038"
+dependencies = [
+ "version_check",
+]
+
+[[package]]
+name = "smallvec"
+version = "1.15.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3763264f6b73151db08c50ff20d7d8a0b8796e021cdea7ceedad07b80155fa0e"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "sqlx"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "378620ccc25c62c89d8be1c819e76a88d59bdcc3304733330788948e619bfd71"
+dependencies = [
+ "sqlx-core",
+ "sqlx-macros",
+ "sqlx-mysql",
+ "sqlx-postgres",
+ "sqlx-sqlite",
+]
+
+[[package]]
+name = "sqlx-core"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05b44e85bf579a8eeb4ceaa77a3a523baf2bf0e9bac7e40f405d537b5d2d5ccb"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "cfg-if",
+ "crc",
+ "crossbeam-queue",
+ "either",
+ "event-listener",
+ "futures-core",
+ "futures-intrusive",
+ "futures-io",
+ "futures-util",
+ "hashbrown 0.16.1",
+ "hashlink",
+ "indexmap",
+ "log",
+ "memchr",
+ "percent-encoding",
+ "rustls",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "smallvec",
+ "thiserror",
+ "tokio",
+ "tokio-stream",
+ "tracing",
+ "url",
+ "webpki-roots",
+]
+
+[[package]]
+name = "sqlx-macros"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd2b84f2bc39a5705ef27ec785a11c934a41bbd4a24941e257927cddc26b60bf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "sqlx-core",
+ "sqlx-macros-core",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "sqlx-macros-core"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb8d96de5fdc85a5c4ec813432b523ec637e80ba98f046555f75f7908ddac7c3"
+dependencies = [
+ "cfg-if",
+ "dotenvy",
+ "either",
+ "heck",
+ "hex",
+ "proc-macro2",
+ "quote",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "sqlx-core",
+ "sqlx-mysql",
+ "sqlx-postgres",
+ "sqlx-sqlite",
+ "syn 2.0.119",
+ "thiserror",
+ "tokio",
+ "url",
+]
+
+[[package]]
+name = "sqlx-mysql"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90b8020fe17c5f2c245bfa2505d7ef59c5604839527c740266ad2214acebea27"
+dependencies = [
+ "bitflags 2.13.1",
+ "byteorder",
+ "bytes",
+ "crc",
+ "digest 0.11.3",
+ "dotenvy",
+ "either",
+ "futures-core",
+ "futures-util",
+ "generic-array",
+ "log",
+ "percent-encoding",
+ "serde",
+ "sha1",
+ "sha2 0.11.0",
+ "sqlx-core",
+ "thiserror",
+ "tracing",
+]
+
+[[package]]
+name = "sqlx-postgres"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87a2bdd6e83f6b3ea525ca9fee568030508b58355a43d0b2c1674d5f79dcd65e"
+dependencies = [
+ "atoi",
+ "base64 0.22.1",
+ "bitflags 2.13.1",
+ "byteorder",
+ "crc",
+ "dotenvy",
+ "etcetera",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "hex",
+ "hkdf",
+ "hmac",
+ "itoa",
+ "log",
+ "md-5",
+ "memchr",
+ "rand 0.10.2",
+ "serde",
+ "serde_json",
+ "sha2 0.11.0",
+ "smallvec",
+ "sqlx-core",
+ "stringprep",
+ "thiserror",
+ "tracing",
+ "whoami",
+]
+
+[[package]]
+name = "sqlx-sqlite"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "488e99c397a62007e4229aec669a179816339afc6d2620ca6fa420dbee2e982c"
+dependencies = [
+ "atoi",
+ "flume",
+ "form_urlencoded",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-intrusive",
+ "futures-util",
+ "libsqlite3-sys",
+ "log",
+ "percent-encoding",
+ "serde",
+ "sqlx-core",
+ "thiserror",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "strict-num"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6637bab7722d379c8b41ba849228d680cc12d0a45ba1fa2b48f2a30577a06731"
+dependencies = [
+ "float-cmp",
+]
+
+[[package]]
+name = "string_cache"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a18596f8c785a729f2819c0f6a7eae6ebeebdfffbfe4214ae6b087f690e31901"
+dependencies = [
+ "new_debug_unreachable",
+ "parking_lot",
+ "phf_shared",
+ "precomputed-hash",
+]
+
+[[package]]
+name = "string_cache_codegen"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "585635e46db231059f76c5849798146164652513eb9e8ab2685939dd90f29b69"
+dependencies = [
+ "phf_generator",
+ "phf_shared",
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "stringprep"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b4df3d392d81bd458a8a621b8bffbd2302a12ffe288a9d931670948749463b1"
+dependencies = [
+ "unicode-bidi",
+ "unicode-normalization",
+ "unicode-properties",
+]
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "svgtypes"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "695b5790b3131dafa99b3bbfd25a216edb3d216dad9ca208d4657bfb8f2abc3d"
+dependencies = [
+ "kurbo",
+ "siphasher",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "3.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "system-configuration"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a13f3d0daba03132c0aa9767f98351b3488edc2c100cda2d2ec2b04f3d8d3c8b"
+dependencies = [
+ "bitflags 2.13.1",
+ "core-foundation 0.9.4",
+ "system-configuration-sys",
+]
+
+[[package]]
+name = "system-configuration-sys"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "tempfile"
+version = "3.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
+dependencies = [
+ "fastrand",
+ "getrandom 0.4.3",
+ "once_cell",
+ "rustix",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tendril"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5fed54709c5b3a53d09bb1c113ea4f5ceafd1e772ddcb0030a82e1d56c087b08"
+dependencies = [
+ "new_debug_unreachable",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec86235f5fcc2a73650310756d2ac5b138a5780bbbdfae3eeccec992c435ba4f"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc04cd3e1236dd4a98afca4569f2deb3f120e5422a4023be2cb683f8486292af"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ad99c4c6d32803332c548b1af0540b357b3f5fc0be8f6c6bfe8b2e6ae784070"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "tiff"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b63feaf3343d35b6ca4d50483f94843803b0f51634937cc2ec519fc32232bc52"
+dependencies = [
+ "fax",
+ "flate2",
+ "half",
+ "quick-error",
+ "weezl",
+ "zune-jpeg",
+]
+
+[[package]]
+name = "time"
+version = "0.3.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdb87b95ec50ddfa440816d227a17b2ccbdda963a316a727fda0fc4334f7d134"
+dependencies = [
+ "deranged",
+ "num-conv",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e1c906769ad99c88eaa54e728060edef082f8e358ff32030cb7c7d315e81109"
+
+[[package]]
+name = "tiny-skia"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47ffee5eaaf5527f630fb0e356b90ebdec84d5d18d937c5e440350f88c5a91ea"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "bytemuck",
+ "cfg-if",
+ "log",
+ "png",
+ "tiny-skia-path",
+]
+
+[[package]]
+name = "tiny-skia-path"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edca365c3faccca67d06593c5980fa6c57687de727a03131735bb85f01fdeeb9"
+dependencies = [
+ "arrayref",
+ "bytemuck",
+ "strict-num",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1e27c91459209c2986af3dcf603a5a74a4368754ce37414f59acc971167f643"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb4ebadaa0af04fab11ae01eb5f9fdb5f9c5b875506e210e71c07873528baa7f"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "202caea871b69668250d242070849eb495be178ed697a3e98aebce5bc81a0bed"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "parking_lot",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78773a2a397f451582ce068015985c33193cf6dea8b74d2a639fe457b2f07b0e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-stream"
+version = "0.1.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3d06f0b082ba57c26b79407372e57cf2a1e28124f78e9479fe80322cf53420b"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "494815d09bf52b5548659851081238f0ca39ff638363907596da739561c62c52"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "libc",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362"
+dependencies = [
+ "serde",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_edit",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.22.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a"
+dependencies = [
+ "indexmap",
+ "serde",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_write",
+ "winnow 0.7.15",
+]
+
+[[package]]
+name = "toml_write"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
+dependencies = [
+ "async-compression",
+ "bitflags 2.13.1",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b11f75e912b0c2be01b63d8cf8057b8c3f97cf34abb3d431a3a4c8675498e233"
+dependencies = [
+ "bitflags 2.13.1",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "http-range-header",
+ "httpdate",
+ "mime",
+ "mime_guess",
+ "percent-encoding",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "log",
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7f578e5945fb242538965c2d0b04418d38ec25c79d160cd279bf0731c8d319"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
+[[package]]
+name = "uncased"
+version = "0.9.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1b88fcfe09e89d3866a5c11019378088af2d24c3fbd4f0543f96b479ec90697"
+dependencies = [
+ "version_check",
+]
+
+[[package]]
+name = "unicase"
+version = "2.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dbc4bc3a9f746d862c45cb89d705aa10f187bb96c76001afab07a0d35ce60142"
+
+[[package]]
+name = "unicode-bidi"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c1cb5db39152898a79168971543b1cb5020dff7fe43c8dc468b0885f5e29df5"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-normalization"
+version = "0.1.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5fd4f6878c9cb28d874b009da9e8d183b5abc80117c40bbd187a1fde336be6e8"
+dependencies = [
+ "tinyvec",
+]
+
+[[package]]
+name = "unicode-properties"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7df058c713841ad818f1dc5d3fd88063241cc61f49f5fbea4b951e8cf5a8d71d"
+
+[[package]]
+name = "unicode-script"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "383ad40bb927465ec0ce7720e033cb4ca06912855fc35db31b5755d0de75b1ee"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"
+
+[[package]]
+name = "unicode-vo"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1d386ff53b415b7fe27b50bb44679e2cc4660272694b7b6f3326d8480823a94"
+
+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "upon"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3ead40aa15464f4d808014183fa0b030761ff6f57e162f7fc76d6a900df7a28"
+dependencies = [
+ "serde",
+ "unicode-ident",
+ "unicode-width",
+]
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "usvg"
+version = "0.48.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "977d0a4abdef933f424a99fe09f95576e089b90aebc6f016a3bc813762493e91"
+dependencies = [
+ "base64 0.23.1",
+ "data-url",
+ "flate2",
+ "fontdb",
+ "harfrust",
+ "imagesize",
+ "kurbo",
+ "log",
+ "pico-args",
+ "roxmltree 0.21.1",
+ "simplecss",
+ "siphasher",
+ "skrifa",
+ "strict-num",
+ "svgtypes",
+ "tiny-skia-path",
+ "unicode-bidi",
+ "unicode-script",
+ "unicode-vo",
+ "xmlwriter",
+]
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.24.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2cefc03fd367c0c6d4305de1b312cf00248c4114f4a0418ce6a6af769e3b0bd9"
+dependencies = [
+ "getrandom 0.4.3",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "v_frame"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "666b7727c8875d6ab5db9533418d7c764233ac9c0cff1d469aec8fa127597be2"
+dependencies = [
+ "aligned-vec",
+ "num-traits",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "vcpkg"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b70935747edd64d89de3efa29d73789b806c15798f8e7dca4d8ac356b50ce70"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.77"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b7777d5cc23d0e91404e53ce2d5e8ec7acae3026b16233dba62cd3246457950"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77775f8f3f7217702089053b94958f8f54061a3f663417df76e19cbdcca29bc1"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e11d33f857dc2fb11b8bc75aee111aa9cbeb12cd9f25efd3d4c2a3dd4e235284"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.127"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ef64dbcc55df09c7e5a46182d181c2cfa3e925f3da937ea764728b4bbb9dcbf"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.104"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c435338968042f4f59a557f690a253676d47ce13ceb55d70100e7facf6620a30"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web_atoms"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba8b815c1b593dc0baf78dd0f4fc8fdb2de53198fb1163738093e9a311c33fb3"
+dependencies = [
+ "phf",
+ "phf_codegen",
+ "string_cache",
+ "string_cache_codegen",
+]
+
+[[package]]
+name = "webpki-root-certs"
+version = "1.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7dcd9d09a39985f5344844e66b0c530a33843579125f23e21e9f0f220850f22a"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "weezl"
+version = "0.1.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a28ac98ddc8b9274cb41bb4d9d4d5c425b6020c50c46f25559911905610b4a88"
+
+[[package]]
+name = "whoami"
+version = "2.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "626c4bac6755d76ffc12cb01b2eac751db1996b9e0041de9aa02c8c211ddc82c"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-registry"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02752bf7fbdcce7f2a27a742f798510f3e5ad88dbe84871e5168e2120c3d5720"
+dependencies = [
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm",
+ "windows_aarch64_msvc",
+ "windows_i686_gnu",
+ "windows_i686_gnullvm",
+ "windows_i686_msvc",
+ "windows_x86_64_gnu",
+ "windows_x86_64_gnullvm",
+ "windows_x86_64_msvc",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "winnow"
+version = "0.7.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winnow"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b97319f7b8343df12cc98938e5c3eb436064524c8d2b4e30a1d3a36eecdf81"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "writeable"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ad82d2a33cdc9674dc7465672f271e096168fcdbe0f799d9e6db8c5892679dc"
+
+[[package]]
+name = "xmlwriter"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec7a2a501ed189703dba8b08142f057e887dfc4b2cc4db2d343ac6376ba3e0b9"
+
+[[package]]
+name = "y4m"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a5a4b21e1a62b67a2970e6831bc091d7b87e119e7f9791aef9702e3bef04448"
+
+[[package]]
+name = "yansi"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfe53a6657fd280eaa890a3bc59152892ffa3e30101319d168b781ed6529b049"
+
+[[package]]
+name = "yoke"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "556764e583adb45a9f8d413c2a147fa7e8d821e48e12b14fd560b607998b75eb"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ab42fc20575779bd240faa45f94a74256f755c0fa9e89f0ede20d91d0cdfc1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+
+[[package]]
+name = "zerotrie"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ea269c3bd32f0a32c321907a2ae912ba6f4649bb0fc764a15627e99a7095a3f"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94b5c6b5976d66c1d703c4fd17d3f5e43c8cedaacf604961b171adc7130896d8"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47402523226a02bfe5230160dc3ccc089aa6f6f19e7fcbb4e6f824bbb1b4aa62"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "zip"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb2a05c7c36fde6c09b08576c9f7fb4cda705990f73b58fe011abf7dfb24168b"
+dependencies = [
+ "arbitrary",
+ "crc32fast",
+ "flate2",
+ "indexmap",
+ "memchr",
+ "time",
+ "zopfli",
+]
+
+[[package]]
+name = "zlib-rs"
+version = "0.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34b31d188d9d685a4f9c7b46d6e36631b07058d2cfe190267adce54dc230bf12"
+
+[[package]]
+name = "zmij"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"
+
+[[package]]
+name = "zopfli"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f05cd8797d63865425ff89b5c4a48804f35ba0ce8d125800027ad6017d2b5249"
+dependencies = [
+ "bumpalo",
+ "crc32fast",
+ "log",
+ "simd-adler32",
+]
+
+[[package]]
+name = "zune-core"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d56377fd46368984a170bc5aac5567e52ca5da874caa60bea39fcbca78fb658b"
+
+[[package]]
+name = "zune-inflate"
+version = "0.2.54"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73ab332fe2f6680068f3582b16a24f90ad7096d5d39b974d1c0aff0125116f02"
+dependencies = [
+ "simd-adler32",
+]
+
+[[package]]
+name = "zune-jpeg"
+version = "0.5.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27bc9d5b815bc103f142aa054f561d9187d191692ec7c2d1e2b4737f8dbd7296"
+dependencies = [
+ "zune-core",
+]
diff --git a/Cargo.toml b/Cargo.toml
new file mode 100644
index 0000000..e25ee2b
--- /dev/null
+++ b/Cargo.toml
@@ -0,0 +1,49 @@
+[package]
+name = "daily-epub"
+version = "0.1.0"
+edition = "2024"
+
+[dependencies]
+ammonia = "4.1.4"
+anyhow = "1.0.104"
+askama = "0.16.0"
+axum = "0.8.9"
+base64 = "0.23.1"
+clap = { version = "4.6.6", features = ["derive"] }
+dom_smoothie = "0.18.0"
+epub-builder = "0.8.3"
+figment = { version = "0.10.19", features = ["toml", "env"] }
+futures = "0.3.34"
+hex = "0.4.3"
+hmac = "0.13.0"
+image = "0.25.10"
+jiff = { version = "0.2.35", features = ["serde"] }
+rand = "0.10.2"
+reqwest = { version = "0.13.4", default-features = false, features = ["rustls", "gzip", "json", "charset", "http2", "query", "system-proxy"] }
+resvg = "0.48.1"
+scraper = "0.27.0"
+serde = { version = "1.0.229", features = ["derive"] }
+serde_json = "1.0.151"
+sha2 = "0.11.0"
+sqlx = { version = "0.9.0", default-features = false, features = [
+    "derive",
+    "json",
+    "macros",
+    "migrate",
+    "runtime-tokio",
+    "sqlite",
+    "tls-rustls-ring",
+] }
+thiserror = "2.0.20"
+tiny-skia = "0.12.0"
+tokio = { version = "1.53.1", features = ["full"] }
+tokio-util = { version = "0.7.19", features = ["io"] }
+tower-http = { version = "0.7.0", features = ["trace", "fs"] }
+tracing = "0.1.44"
+tracing-subscriber = { version = "0.3.23", features = ["env-filter"] }
+url = { version = "2.5.8", features = ["serde"] }
+
+[dev-dependencies]
+figment = { version = "0.10.19", features = ["test", "toml", "env"] }
+tempfile = "3.27.0"
+zip = { version = "6", default-features = false, features = ["deflate"] }
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..4cc03b0
--- /dev/null
+++ b/README.md
@@ -0,0 +1,416 @@
+# The Daily EPUB
+
+A personalized daily newspaper, delivered as an EPUB.
+
+Every morning a systemd timer wakes one Rust binary. It pulls the last ~26 hours
+from a self-hosted [Miniflux](https://miniflux.app), deduplicates and extracts
+the articles, enriches them with HackerNews/Lobsters/Reddit social proof, filters
+300–500 candidates down to ~120 with cheap heuristics, and asks DeepSeek to score,
+select and introduce 15–25 of them. It assembles two EPUB editions (a standard one
+and one tuned for the Xteink X4 e-ink reader), converts the X4 edition to XTC, and
+drops everything into a [BookOrbit](https://github.com/thallada/bookorbit) watched
+folder so KOReader can pick it up over OPDS. Each article chapter ends with 👍/👎
+links that feed back into tomorrow's curation.
+
+Steady-state cost is roughly **$0.05–0.30/day** in DeepSeek tokens, hard-capped by
+`max_daily_usd`.
+
+- Full design: [`docs/plans/2026-08-15-the-daily-epub.md`](docs/plans/2026-08-15-the-daily-epub.md)
+- Implementation decisions: [`docs/plans/2026-08-15-implementation-notes.md`](docs/plans/2026-08-15-implementation-notes.md)
+
+---
+
+## Pipeline
+
+```
+Miniflux ingest ─▶ dedupe ─▶ extraction ─▶ persist ─▶ social enrichment
+  ─▶ pre-filter ─▶ LLM scoring ─▶ selection ─▶ comments ─▶ world briefing
+  ─▶ editorial ─▶ EPUB (standard + X4) ─▶ XTC ─▶ publish ─▶ report
+```
+
+Every stage writes to SQLite, so a run is idempotent per date: re-running
+`generate --date 2026-08-15` replaces that issue rather than duplicating it.
+
+**Failure policy.** Miniflux ingest, SQLite writes, EPUB assembly and publishing
+are fatal — without them there is no issue, and the `runs` row records why.
+Social lookups, comment fetching, the world briefing, images and the XTC
+conversion are best-effort: they log, add a warning (run status `degraded`) and
+the run continues. Every DeepSeek stage *degrades*: a missing key, a dead API or
+a tripped budget turns the run into the `--skip-llm` shape (prefilter order
+selects, feed excerpts stand in for summaries) instead of losing the day's issue.
+
+---
+
+## Prerequisites
+
+| Requirement | Why | Notes |
+|---|---|---|
+| Rust (2024 edition toolchain) | building | `cargo build --release` |
+| **Miniflux** with an API key | the only content source | Settings → API Keys. The client is read-only and never mutates read state. |
+| **DeepSeek API key** | curation + editorial | <https://platform.deepseek.com>. Optional: `--skip-llm` runs the whole pipeline without it. |
+| A 32+ byte random secret | signs the 👍/👎 rating links | `openssl rand -hex 32` |
+| **BookOrbit** library + watched folder | delivery to KOReader over OPDS | Create a dedicated "The Daily EPUB" library, enable *Watch folders*, note the folder path. |
+| **Node.js 18+** and a clone of [`epub-to-xtc-converter`](https://github.com/bigbag/epub-to-xtc-converter) | XTC/XTCH output for the Xteink X4 | Optional (`xtc.enabled = false` turns it off). Needs `npm install` **inside `cli/`**, and a settings JSON naming a real TTF/OTF — see below. It has **no global npm bin** — it is invoked as `node <repo>/cli/index.js convert …`, which is why `xtc.command`/`xtc.args` are fully general. |
+| A reverse proxy for `daily.hallada.net` → `127.0.0.1:3499` | rating links must be reachable from e-readers on the internet | TLS via your existing setup. |
+
+`data/scour-interests.opml` (the ~220 Scour interests the taste profile is seeded
+from) must be readable at the path in `interests_opml`.
+
+---
+
+## Install & build
+
+```sh
+git clone https://github.com/thallada/the-daily-epub && cd the-daily-epub
+cargo build --release
+cargo test                      # everything is offline; no keys needed
+sudo install -m0755 target/release/daily-epub /usr/local/bin/
+```
+
+### Commands
+
+```
+daily-epub generate [--date YYYY-MM-DD] [--dry-run] [--out DIR] [--max-articles N] [--skip-llm]
+daily-epub serve                # rating endpoints + XTC OPDS + static files
+daily-epub profile rebuild      # regenerate the taste profile from ratings (weekly inside generate)
+daily-epub backfill-social      # re-poll social scores for recent articles
+daily-epub db migrate           # run migrations (also automatic on every start)
+```
+
+`--dry-run` does everything except deliver: it still ingests, persists entries and
+articles, curates and **builds both EPUBs into `--out`**, but it does not copy to
+BookOrbit, does not run the retention sweep, does not write the `issues` row and
+does not advance the ingest watermark. It prints the lineup and the cost report.
+
+---
+
+## Configuration
+
+Start from [`config.example.toml`](config.example.toml). Load order, later wins:
+
+1. built-in defaults
+2. the TOML file (`--config PATH`, else `./config.toml` when present)
+3. `DAILY_EPUB_*` environment variables
+
+Nested keys use a **double underscore**: `[miniflux] api_key` becomes
+`DAILY_EPUB_MINIFLUX__API_KEY`. Top-level keys are just uppercased:
+`DAILY_EPUB_LOOKBACK_HOURS=30`. As a convenience, plain **`DAILY_EPUB_SECRET`**
+is accepted as an alias for `server.hmac_secret` (the explicit key wins if both
+are set).
+
+Secrets belong in the environment file, never in the TOML.
+
+### Reference
+
+| Key | Default | Meaning |
+|---|---|---|
+| `timezone` | `America/New_York` | Day boundaries and `--date` interpretation. |
+| `lookback_hours` | `26` | Size of the ingest window ending at the issue day's end (clamped to now). |
+| `target_article_count` | `20` | Lineup size the selector aims for. `--max-articles` overrides it. |
+| `prefilter_keep` | `120` | Candidates surviving the heuristic pre-filter. Must be ≥ `target_article_count`. |
+| `retention_days` | `21` | Published files older than this are deleted from both publish dirs. SQLite history is kept forever. |
+| `max_daily_usd` | `2.0` | Hard ceiling on DeepSeek spend **per day**, not per run — a re-run inherits what earlier runs for that date already spent. Tripping it skips remaining LLM work and degrades to excerpts. |
+| `world_briefing` | `true` | Include the Wikipedia Current Events section. |
+| `database_path` | `/var/lib/daily-epub/daily-epub.db` | SQLite file; parent dirs are created. |
+| `out_dir` | `/var/lib/daily-epub/out` | Where `generate` writes artifacts before publishing. |
+| `interests_opml` | `data/scour-interests.opml` | Scour interest export used to seed the taste profile. |
+| `miniflux.base_url` | `http://127.0.0.1:8082` | Miniflux root (no `/v1`). |
+| `miniflux.api_key` | — | **`DAILY_EPUB_MINIFLUX__API_KEY`**. Required. |
+| `miniflux.page_limit` | `250` | Entries per page; Miniflux caps this at 250. |
+| `deepseek.base_url` | `https://api.deepseek.com/v1` | OpenAI-compatible endpoint. |
+| `deepseek.model` | `deepseek-v4-flash` | Verified 2026-08-15 (DeepSeek-V4-Flash-0731). |
+| `deepseek.api_key` | — | **`DAILY_EPUB_DEEPSEEK__API_KEY`**. Absent ⇒ the run curates heuristically. |
+| `deepseek.score_batch_size` | `12` | Articles per stage-A scoring request. |
+| `deepseek.score_temperature` | `0.3` | Scoring/selection temperature. |
+| `deepseek.editorial_temperature` | `0.8` | Summaries, intros, front page. |
+| `deepseek.price_input_per_mtok` | `0.14` | USD per 1M cache-miss input tokens (cost guardrail arithmetic). |
+| `deepseek.price_cached_input_per_mtok` | `0.0028` | USD per 1M prefix-cache-hit input tokens. |
+| `deepseek.price_output_per_mtok` | `0.28` | USD per 1M output tokens. |
+| `curation.always_include_feeds` | `[]` | Miniflux feed ids or URL substrings that can never be dropped. |
+| `curation.blocked_domains` | `[]` | Hosts excluded outright. |
+| `curation.paywall_domains` | `[]` | Extra paywalled hosts, merged with the built-in list (nytimes, wsj, ft, economist, …). |
+| `curation.sections` | 8 sections | The **only** section names the model may use. `World Briefing` is reserved and never offered. |
+| `publish.bookorbit_dir` | `/srv/bookorbit/libraries/daily-epub` | BookOrbit watched folder. Both EPUB editions land here by atomic copy, distinguished by a `(X4)` tag in **both** the filename and `dc:title` — libraries and OPDS clients list books by title, so the filename alone would make them look identical. |
+| `publish.xtc_dir` | `/var/lib/daily-epub/xtc` | XTC artifacts + the generated `xtc.xml` OPDS feed. |
+| `xtc.enabled` | `true` | Set `false` to skip the converter entirely. |
+| `xtc.command` | `node` | Converter executable. |
+| `xtc.args` | `["/opt/epub-to-xtc-converter/cli/index.js", "convert"]` | Prefix; the code appends `<input.epub> -o <output> -f <format>` (plus `-c <settings>`). |
+| `xtc.format` | `xtch` | `xtc` (1-bit) or `xtch` (2-bit grayscale). `xtch` is ~96 KB per rendered page, `xtc` half that. |
+| `xtc.settings` | unset | Settings JSON passed as `-c`. The flag is optional to the converter but the file is **required in practice**: without `font.path` the converter exits 2 before doing any work. Start from [`xtc-settings.example.json`](xtc-settings.example.json). |
+| `server.bind` | `127.0.0.1:3499` | Listen address. |
+| `server.public_url` | `https://daily.hallada.net` | Base URL the rating links inside the EPUB are built from. |
+| `server.hmac_secret` | — | **`DAILY_EPUB_SERVER__HMAC_SECRET`** (or `DAILY_EPUB_SECRET`). Without it, generated links are rejected with 403. |
+| `server.basic_auth_user` / `_pass` | unset | Optional Basic auth for `/opds/xtc.xml` and `/files/xtc/`. |
+
+---
+
+## Deployment (systemd)
+
+Units live in [`systemd/`](systemd/): `daily-epub.service` (the server),
+`daily-epub-generate.service` (oneshot) and `daily-epub-generate.timer`
+(05:30 America/New_York, `Persistent=true`, 5-minute jitter).
+
+```sh
+# binary
+cargo build --release
+sudo install -m0755 target/release/daily-epub /usr/local/bin/
+
+# user + state
+sudo useradd --system --home /var/lib/daily-epub --shell /usr/sbin/nologin daily-epub
+
+# config + secrets
+sudo install -d -m0750 -o daily-epub -g daily-epub /etc/daily-epub
+sudo install -m0640 -o daily-epub -g daily-epub config.example.toml /etc/daily-epub/config.toml
+sudo -e /etc/daily-epub/config.toml            # set publish dirs, xtc args, public_url
+sudo tee /etc/daily-epub/env >/dev/null <<EOF
+DAILY_EPUB_MINIFLUX__API_KEY=…
+DAILY_EPUB_DEEPSEEK__API_KEY=…
+DAILY_EPUB_SERVER__HMAC_SECRET=$(openssl rand -hex 32)
+EOF
+sudo chown daily-epub:daily-epub /etc/daily-epub/env && sudo chmod 0600 /etc/daily-epub/env
+
+# publish dirs must exist and be writable by the service user
+sudo install -d -o daily-epub -g daily-epub /var/lib/daily-epub/xtc
+sudo setfacl -m u:daily-epub:rwx /srv/bookorbit/libraries/daily-epub   # or chown
+
+# units
+sudo install -m0644 systemd/daily-epub.service systemd/daily-epub-generate.service \
+                    systemd/daily-epub-generate.timer /etc/systemd/system/
+sudo systemctl daemon-reload
+sudo systemctl enable --now daily-epub.service daily-epub-generate.timer
+```
+
+> **Keep `ReadWritePaths` in sync.** Both units run under `ProtectSystem=strict`
+> and list the publish directories explicitly:
+> ```
+> ReadWritePaths=/home/thallada/bookorbit/books/daily-epub /var/lib/daily-epub/xtc
+> ```
+> If you change `publish.bookorbit_dir` or `publish.xtc_dir` in the config, change
+> these lines too and `systemctl daemon-reload`, or publishing fails with
+> `Read-only file system`.
+
+The generate unit deliberately omits `MemoryDenyWriteExecute` because it spawns
+Node for the XTC converter, whose JIT needs W+X pages.
+
+### Reverse proxy (`daily.hallada.net`)
+
+The rating links baked into every article chapter point at
+`server.public_url`, so `daily.hallada.net` must resolve and serve TLS from the
+internet (e-readers tap these links). The XTC OPDS feed rides on the same host.
+With an existing certificate, a minimal nginx site is:
+
+```nginx
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name daily.hallada.net;
+
+    ssl_certificate     /etc/letsencrypt/live/daily.hallada.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/daily.hallada.net/privkey.pem;
+
+    # XTCH files can be tens of MB; don't buffer them through nginx memory.
+    proxy_max_temp_file_size 0;
+
+    location / {
+        proxy_pass http://127.0.0.1:3499;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name daily.hallada.net;
+    return 301 https://$host$request_uri;
+}
+```
+
+Enable it (`ln -s` into `sites-enabled`, `nginx -t`, `systemctl reload nginx`),
+then `curl https://daily.hallada.net/healthz` should return `ok`. No auth is
+needed at the proxy layer: rating links are self-authenticating (HMAC tokens)
+and the OPDS/file routes use the app-level Basic auth from
+`server.basic_auth_user`/`_pass` if you set them.
+
+### Installing the XTC converter
+
+```sh
+sudo git clone https://github.com/bigbag/epub-to-xtc-converter /opt/epub-to-xtc-converter
+sudo npm --prefix /opt/epub-to-xtc-converter/cli install --omit=dev
+sudo install -m0644 -o daily-epub -g daily-epub \
+     xtc-settings.example.json /etc/daily-epub/xtc-settings.json
+sudo -e /etc/daily-epub/xtc-settings.json     # point font.path at a font you have
+```
+
+`font.path` must be an existing TTF/OTF: the converter validates its settings
+before opening the EPUB and exits 2 with `Font path is required` otherwise. There
+is no built-in default, and the converter's own `cli/settings.json` points at a
+GNOME font that most servers do not have. Check with `fc-list | grep -i serif`.
+
+Then verify by hand before trusting the timer — **as `daily-epub`**, the account
+the timer actually uses:
+
+```sh
+sudo -u daily-epub node /opt/epub-to-xtc-converter/cli/index.js convert \
+     "/var/lib/daily-epub/out/The Daily EPUB - $(date +%F) (X4).epub" \
+     -o /tmp/xtc-check.xtch -f xtch -c /etc/daily-epub/xtc-settings.json
+```
+
+> **Do not run this as yourself.** `/etc/daily-epub` is `0750 daily-epub:daily-epub`,
+> so any other account — including your own — cannot even traverse into it. The
+> converter loads its settings behind `fs.existsSync()`, which returns `false` on
+> `EACCES` just as it does for a missing file, so an unreadable config is silently
+> discarded and the built-in defaults (`font.path: null`) are used instead. You
+> get `Font path is required` for a file that exists and is perfectly valid.
+> Running as `daily-epub` both avoids the trap and proves the *service* can read
+> everything it needs.
+
+### How the XTC edition reaches the X4
+
+The `.xtch` file in `publish.xtc_dir` is **not** meant for BookOrbit — BookOrbit
+only watches the EPUB folder and wouldn't import the XTC binary format anyway.
+`daily-epub serve` publishes its own OPDS 1.2 feed for it: point the X4's
+CrossPoint OPDS browser at `https://daily.hallada.net/opds/xtc.xml` (the bare
+`https://daily.hallada.net/opds` works too) and it will list the last 14 issues,
+newest first, with the files served from `/files/xtc/`. (The X4 can also fall
+back to the "(X4)" EPUB via BookOrbit's own OPDS catalog.)
+
+`xtc.xml` is not an issue — it is a generated index, rewritten from scratch at
+the end of every run by scanning `publish.xtc_dir` for `.xtc`/`.xtch` files. The
+issues themselves are the dated files beside it; `/files/xtc/` is a route, not a
+directory on disk. So the feed always carries the back catalogue, capped at the
+last 14 days by `XTC_FEED_ENTRIES` and bounded by `retention_days` on disk. An
+empty `<feed>` with no `<entry>` elements means the converter never produced a
+file — check the run's warnings, not the server.
+
+**Budget the disk.** XTCH is a pre-rendered 2-bit page bitmap — 480×800 px is
+~96 KB per page regardless of what is on it — so an issue is large and its size
+tracks the page count, which `font.size` drives:
+
+| `font.size` | pages | `.xtch` | `.xtc` (1-bit) |
+|---|---|---|---|
+| 34 (converter default) | 1,088 | 104 MB | ~52 MB |
+| 30 (`xtc-settings.example.json`) | 820 | 79 MB | ~39 MB |
+
+Measured on the 20-article issue of 2026-08-15; conversion took ~13 s either way.
+At `retention_days = 21` that is 1.7–2.2 GB in `publish.xtc_dir`, and it is also
+what the X4 downloads over WiFi per issue.
+
+---
+
+## Operational verification
+
+Condensed from spec §5. Run it in this order the first time.
+
+```sh
+# 1. Config and schema
+daily-epub --config /etc/daily-epub/config.toml db migrate
+
+# 2. Ingest only, no keys spent: does Miniflux answer, and with how much?
+DAILY_EPUB_OUT_DIR=./out daily-epub generate --dry-run --skip-llm --max-articles 6 --out ./out
+#    → prints the window, per-feed entry counts, the lineup and $0.0000
+
+# 3. Inspect the artifacts
+ls -la ./out                       # two .epub files
+epubcheck "./out/The Daily EPUB - $(date +%F).epub"   # expect zero errors
+#    open the standard edition in Calibre / KOReader: cover, From the Editor,
+#    In This Issue, sections, discussions, colophon; TOC depth 2
+
+# 4. Now with DeepSeek, still not publishing
+daily-epub generate --dry-run --out ./out --max-articles 6
+#    → check the lineup is sane and the printed cost is well under $0.50
+
+# 5. Full live run
+sudo systemctl start daily-epub-generate
+journalctl -u daily-epub-generate -n 100 --no-pager
+ls -la /srv/bookorbit/libraries/daily-epub /var/lib/daily-epub/xtc
+#    → the issue appears in BookOrbit's UI under the Daily EPUB library only
+
+# 6. Delivery
+#    KOReader (Kindle/Palma): browse BookOrbit's OPDS, download, read.
+#    Xteink X4 / CrossPoint: OPDS → https://daily.hallada.net/opds/xtc.xml
+curl -s https://daily.hallada.net/healthz
+curl -s https://daily.hallada.net/opds/xtc.xml | head
+curl -s https://daily.hallada.net/issues.json | jq '.[0]'
+
+# 7. Feedback loop: tap 👍 in KOReader, then
+sqlite3 /var/lib/daily-epub/daily-epub.db 'select * from ratings;'
+sqlite3 /var/lib/daily-epub/daily-epub.db 'select * from feed_priors;'
+
+# 8. Watch cost and quality for a week
+sqlite3 /var/lib/daily-epub/daily-epub.db \
+  'select date, status, entries_fetched, candidates, selected, cost_usd from runs order by id desc limit 7;'
+```
+
+Tune `prefilter_keep`, `target_article_count` and `curation.always_include_feeds`
+from what you see in step 8.
+
+### Troubleshooting
+
+| Symptom | Likely cause |
+|---|---|
+| `ingesting entries from miniflux` error chain | wrong `miniflux.base_url`/API key, or Miniflux is down. Fatal by design. |
+| Rating links return 403 | the issue was generated with a different (or missing) `server.hmac_secret` than the running server has. |
+| `Read-only file system` while publishing | `ReadWritePaths` in the unit does not cover the configured publish dirs. |
+| Run status `degraded` | a best-effort stage failed; the warnings are in the report (`/issues.json`, `runs.error`, the journal). |
+| No XTC file | `xtc.enabled = false`, Node missing, wrong `xtc.args` path, or `xtc.settings` unset/pointing at a font that does not exist. Non-fatal — the X4 can read the X4 EPUB from BookOrbit instead. The report warning quotes the converter's own error. |
+| `Font path is required` for a settings file that *does* set `font.path` | The process cannot read the file, and the converter cannot tell that apart from the file not existing. Almost always running the converter as yourself instead of `daily-epub` (see above), or a font path that has moved. `sudo -u daily-epub cat /etc/daily-epub/xtc-settings.json` and `sudo -u daily-epub test -r <font> && echo ok` settle it. |
+| The X4's OPDS browser says "Failed to fetch feed" | Usually an *empty* feed: `curl -s https://daily.hallada.net/opds/xtc.xml` and count the `<entry>` elements. Zero means no `.xtch` has ever been published — fix the converter, not the server. |
+| No World Briefing | The portal page for the issue's own date is an empty stub until midday UTC, so the run falls back up to `world::MAX_LOOKBACK_DAYS` days. A warning means even those were empty or Wikipedia was unreachable. |
+
+---
+
+## Development
+
+```sh
+cargo test                 # unit + integration, fully offline
+cargo clippy --all-targets
+cargo fmt
+```
+
+The crate is a library plus a thin binary, so tests drive the pipeline directly.
+`tests/e2e_pipeline.rs` is the capstone: synthetic entries → dedupe → offline
+extraction → prefilter → selection (both the `--skip-llm` route and a
+`MockBackend` DeepSeek route) → editorial → both EPUB editions → publish → OPDS
+and database rows, with no network access anywhere.
+
+Layout: `src/pipeline.rs` wires the stages; `src/{dedupe,extract,social,curate,
+comments,world,epub,publish,server}` implement them; `src/auth.rs` owns the rating
+token formula used by both the EPUB writer and the server; `src/types.rs` is the
+contract between stages.
+
+---
+
+## Known limitations
+
+From spec §7, plus what implementation turned up:
+
+- **X/Twitter social proof is omitted** — no free API. The `social.source` enum
+  reserves `x` for the day that changes.
+- **Lobsters linkage only works when the entry arrived via a lobste.rs feed** or
+  carries a `lobste.rs/s/<id>` comments URL: there is no public URL-search API.
+- **Paywalled articles degrade to an excerpt plus a link.** They are penalized in
+  the pre-filter but not banned — strong social proof can still surface them.
+- **The Xteink X4 cannot follow rating links** (no browser). Rating happens from
+  KOReader devices; the X4 edition still carries the links harmlessly.
+- **Reddit is rate-limited to ~1 request/second** and is skipped for the rest of
+  the run after a 429. Social data is best-effort by design.
+- **"Came via Scour" needs the feed URL.** It is detected from the live Miniflux
+  feed map during a run; re-deriving it later from the `entries` table alone
+  falls back to matching the feed title.
+- **Images are downloaded once per edition** (the two editions need different
+  resolutions and colour profiles), so an image-heavy issue makes two passes.
+- **`dc:date` rides inside a `dcterms:date` metadata fragment** because
+  `epub-builder` neither exposes `dc:date` nor accepts a non-`chrono` date. The
+  OPF output is correct; the mechanism is a workaround.
+- **`async-openai` is not used.** The published crate exposes neither `Client` nor
+  `types::chat` in a usable feature combination and would add a second HTTP
+  stack, so `curate/llm.rs` speaks the OpenAI-compatible wire protocol over the
+  shared `reqwest` client instead, behind a `ChatBackend` trait. The dependency
+  was removed.
+- **Only DeepSeek is wired.** Another provider means another `ChatBackend` impl.
+- **No embedding-based personal ranker yet** (spec §3.9 future work); the schema
+  is ready for it once ~200 ratings exist.
+- **One reader, one issue per day.** There is no multi-user support and no
+  weekly/retrospective edition (spec §6).
diff --git a/askama.toml b/askama.toml
new file mode 100644
index 0000000..5fae6d4
--- /dev/null
+++ b/askama.toml
@@ -0,0 +1,4 @@
+[general]
+# EPUB chapter templates live next to the builder that renders them
+# (implementation notes §11).
+dirs = ["src/epub/templates"]
diff --git a/config.example.toml b/config.example.toml
new file mode 100644
index 0000000..eadd34c
--- /dev/null
+++ b/config.example.toml
@@ -0,0 +1,82 @@
+# The Daily EPUB — example configuration (spec §3.14).
+#
+# Load order (later wins): built-in defaults ← this file ← `DAILY_EPUB_*` env vars.
+# Nested keys use a double underscore in env vars, e.g.
+#   DAILY_EPUB_MINIFLUX__API_KEY=...
+#   DAILY_EPUB_DEEPSEEK__API_KEY=...
+#   DAILY_EPUB_SERVER__HMAC_SECRET=...
+#   DAILY_EPUB_LOOKBACK_HOURS=30
+
+timezone = "America/New_York"
+lookback_hours = 26
+target_article_count = 20
+prefilter_keep = 120
+retention_days = 21
+max_daily_usd = 2.0
+world_briefing = true
+
+# SQLite database file. Parent directories are created on demand.
+database_path = "/var/lib/daily-epub/daily-epub.db"
+
+# Default output directory for generated artifacts (overridden by `--out`).
+out_dir = "/var/lib/daily-epub/out"
+
+# Path to the Scour interests OPML used to seed the taste profile (§3.6).
+interests_opml = "data/scour-interests.opml"
+
+[miniflux]
+base_url = "http://127.0.0.1:8082"
+# api_key via DAILY_EPUB_MINIFLUX__API_KEY env
+page_limit = 250
+
+[deepseek]
+base_url = "https://api.deepseek.com/v1"
+model = "deepseek-v4-flash"          # DeepSeek-V4-Flash-0731 (confirmed 2026-08-15)
+# api_key via DAILY_EPUB_DEEPSEEK__API_KEY env
+score_batch_size = 12
+score_temperature = 0.3
+editorial_temperature = 0.8
+# USD per 1M tokens, used for the cost guardrail.
+price_input_per_mtok = 0.14
+price_cached_input_per_mtok = 0.0028
+price_output_per_mtok = 0.28
+
+[curation]
+always_include_feeds = []            # miniflux feed ids or site urls
+blocked_domains = []
+# Extra paywalled hosts, merged with the built-in list (nytimes, wsj, ft, …).
+# A short body from one of these is marked "excerpt only" and penalized (§3.3).
+paywall_domains = []
+sections = [
+  "Top Stories",
+  "Tech & Engineering",
+  "Science & Space",
+  "AI & Machine Learning",
+  "Culture & Essays",
+  "Boston & Local",
+  "Niche Corner",
+  "From the Blogroll",
+]
+
+[publish]
+bookorbit_dir = "/srv/bookorbit/libraries/daily-epub"
+xtc_dir = "/var/lib/daily-epub/xtc"
+
+[xtc]
+enabled = true
+# epub-to-xtc-converter has no global npm bin; it is invoked through node.
+# The code appends: <input.epub> -o <output.xtch> -f <format> -c <settings>
+command = "node"
+args = ["/opt/epub-to-xtc-converter/cli/index.js", "convert"]
+format = "xtch"                      # xtc (1-bit) | xtch (grayscale)
+# REQUIRED in practice: the converter refuses to start without `font.path`,
+# which can only be given through this file. Start from xtc-settings.example.json.
+settings = "/etc/daily-epub/xtc-settings.json"
+
+[server]
+bind = "127.0.0.1:3499"
+public_url = "https://daily.hallada.net"
+# hmac_secret via DAILY_EPUB_SERVER__HMAC_SECRET env (32+ random bytes)
+# Optional Basic auth for the XTC OPDS feed and file downloads:
+# basic_auth_user = "daily"
+# basic_auth_pass = "..."
diff --git a/data/scour-interests.opml b/data/scour-interests.opml
new file mode 100644
index 0000000..1d43917
--- /dev/null
+++ b/data/scour-interests.opml
@@ -0,0 +1 @@
+ <opml version="1.0"><head><title>tyler's Interests on Scour</title></head><body><outline type="rss" text="Gaussian Splatting" xmlUrl="https://scour.ing/@tyler/interests/Gaussian%20Splatting/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Gaussian%20Splatting"/><outline type="rss" text="Writerdeck" xmlUrl="https://scour.ing/@tyler/interests/Writerdeck/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Writerdeck"/><outline type="rss" text="tmux" xmlUrl="https://scour.ing/@tyler/interests/tmux/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/tmux"/><outline type="rss" text="Calibre" xmlUrl="https://scour.ing/@tyler/interests/Calibre/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Calibre"/><outline type="rss" text="Low-Tech" xmlUrl="https://scour.ing/@tyler/interests/Low-Tech/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Low-Tech"/><outline type="rss" text="Bioinformatics" xmlUrl="https://scour.ing/@tyler/interests/Bioinformatics/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Bioinformatics"/><outline type="rss" text="Engineering" xmlUrl="https://scour.ing/@tyler/interests/Engineering/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Engineering"/><outline type="rss" text="Tech History" xmlUrl="https://scour.ing/@tyler/interests/Tech%20History/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Tech%20History"/><outline type="rss" text="Nature" xmlUrl="https://scour.ing/@tyler/interests/Nature/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Nature"/><outline type="rss" text="Neuroscience" xmlUrl="https://scour.ing/@tyler/interests/Neuroscience/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Neuroscience"/><outline type="rss" text="History" xmlUrl="https://scour.ing/@tyler/interests/History/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/History"/><outline type="rss" text="Space" xmlUrl="https://scour.ing/@tyler/interests/Space/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Space"/><outline type="rss" text="Reading Lists" xmlUrl="https://scour.ing/@tyler/interests/Reading%20Lists/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Reading%20Lists"/><outline type="rss" text="Note-Taking" xmlUrl="https://scour.ing/@tyler/interests/Note-Taking/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Note-Taking"/><outline type="rss" text="Journaling" xmlUrl="https://scour.ing/@tyler/interests/Journaling/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Journaling"/><outline type="rss" text="PKM" xmlUrl="https://scour.ing/@tyler/interests/PKM/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/PKM"/><outline type="rss" text="Knowledge Management" xmlUrl="https://scour.ing/@tyler/interests/Knowledge%20Management/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Knowledge%20Management"/><outline type="rss" text="Remote Living" xmlUrl="https://scour.ing/@tyler/interests/Remote%20Living/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Remote%20Living"/><outline type="rss" text="Personal Archiving" xmlUrl="https://scour.ing/@tyler/interests/Personal%20Archiving/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Personal%20Archiving"/><outline type="rss" text="Personal Websites" xmlUrl="https://scour.ing/@tyler/interests/Personal%20Websites/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Personal%20Websites"/><outline type="rss" text="Self-Hosted" xmlUrl="https://scour.ing/@tyler/interests/Self-Hosted/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Self-Hosted"/><outline type="rss" text="Side Projects" xmlUrl="https://scour.ing/@tyler/interests/Side%20Projects/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Side%20Projects"/><outline type="rss" text="RSS Readers" xmlUrl="https://scour.ing/@tyler/interests/RSS%20Readers/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/RSS%20Readers"/><outline type="rss" text="Homelab" xmlUrl="https://scour.ing/@tyler/interests/Homelab/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Homelab"/><outline type="rss" text="Hiking" xmlUrl="https://scour.ing/@tyler/interests/Hiking/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Hiking"/><outline type="rss" text="Camping" xmlUrl="https://scour.ing/@tyler/interests/Camping/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Camping"/><outline type="rss" text="Running" xmlUrl="https://scour.ing/@tyler/interests/Running/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Running"/><outline type="rss" text="Long-form" xmlUrl="https://scour.ing/@tyler/interests/Long-form/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Long-form"/><outline type="rss" text="Digital Art" xmlUrl="https://scour.ing/@tyler/interests/Digital%20Art/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Digital%20Art"/><outline type="rss" text="Worldbuilding" xmlUrl="https://scour.ing/@tyler/interests/Worldbuilding/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Worldbuilding"/><outline type="rss" text="Sci-Fi" xmlUrl="https://scour.ing/@tyler/interests/Sci-Fi/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Sci-Fi"/><outline type="rss" text="Culture" xmlUrl="https://scour.ing/@tyler/interests/Culture/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Culture"/><outline type="rss" text="Essays" xmlUrl="https://scour.ing/@tyler/interests/Essays/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Essays"/><outline type="rss" text="Speculative Fiction" xmlUrl="https://scour.ing/@tyler/interests/Speculative%20Fiction/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Speculative%20Fiction"/><outline type="rss" text="Generative Art" xmlUrl="https://scour.ing/@tyler/interests/Generative%20Art/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Generative%20Art"/><outline type="rss" text="Literature" xmlUrl="https://scour.ing/@tyler/interests/Literature/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Literature"/><outline type="rss" text="Poetry" xmlUrl="https://scour.ing/@tyler/interests/Poetry/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Poetry"/><outline type="rss" text="Technical Writing" xmlUrl="https://scour.ing/@tyler/interests/Technical%20Writing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Technical%20Writing"/><outline type="rss" text="Reading" xmlUrl="https://scour.ing/@tyler/interests/Reading/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Reading"/><outline type="rss" text="Music" xmlUrl="https://scour.ing/@tyler/interests/Music/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Music"/><outline type="rss" text="Science Fiction" xmlUrl="https://scour.ing/@tyler/interests/Science%20Fiction/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Science%20Fiction"/><outline type="rss" text="Writing" xmlUrl="https://scour.ing/@tyler/interests/Writing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Writing"/><outline type="rss" text="Books" xmlUrl="https://scour.ing/@tyler/interests/Books/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Books"/><outline type="rss" text="Internet History" xmlUrl="https://scour.ing/@tyler/interests/Internet%20History/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Internet%20History"/><outline type="rss" text="Aerospace" xmlUrl="https://scour.ing/@tyler/interests/Aerospace/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Aerospace"/><outline type="rss" text="Cats" xmlUrl="https://scour.ing/@tyler/interests/Cats/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Cats"/><outline type="rss" text="Science News" xmlUrl="https://scour.ing/@tyler/interests/Science%20News/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Science%20News"/><outline type="rss" text="Aviation" xmlUrl="https://scour.ing/@tyler/interests/Aviation/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Aviation"/><outline type="rss" text="Space Technology" xmlUrl="https://scour.ing/@tyler/interests/Space%20Technology/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Space%20Technology"/><outline type="rss" text="Space Exploration" xmlUrl="https://scour.ing/@tyler/interests/Space%20Exploration/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Space%20Exploration"/><outline type="rss" text="Science" xmlUrl="https://scour.ing/@tyler/interests/Science/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Science"/><outline type="rss" text="Developer Tools" xmlUrl="https://scour.ing/@tyler/interests/Developer%20Tools/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Developer%20Tools"/><outline type="rss" text="AI Agents" xmlUrl="https://scour.ing/@tyler/interests/AI%20Agents/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/AI%20Agents"/><outline type="rss" text="LLMs" xmlUrl="https://scour.ing/@tyler/interests/LLMs/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/LLMs"/><outline type="rss" text="Claude" xmlUrl="https://scour.ing/@tyler/interests/Claude/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Claude"/><outline type="rss" text="Game Reviews" xmlUrl="https://scour.ing/@tyler/interests/Game%20Reviews/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Game%20Reviews"/><outline type="rss" text="Board Games" xmlUrl="https://scour.ing/@tyler/interests/Board%20Games/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Board%20Games"/><outline type="rss" text="Video Games" xmlUrl="https://scour.ing/@tyler/interests/Video%20Games/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Video%20Games"/><outline type="rss" text="photography " xmlUrl="https://scour.ing/@tyler/interests/photography%20/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/photography%20"/><outline type="rss" text="Films" xmlUrl="https://scour.ing/@tyler/interests/Films/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Films"/><outline type="rss" text="Off-Grid Living" xmlUrl="https://scour.ing/@tyler/interests/Off-Grid%20Living/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Off-Grid%20Living"/><outline type="rss" text="Offline-First" xmlUrl="https://scour.ing/@tyler/interests/Offline-First/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Offline-First"/><outline type="rss" text="Android" xmlUrl="https://scour.ing/@tyler/interests/Android/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Android"/><outline type="rss" text="Book Reviews" xmlUrl="https://scour.ing/@tyler/interests/Book%20Reviews/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Book%20Reviews"/><outline type="rss" text="Book Lists" xmlUrl="https://scour.ing/@tyler/interests/Book%20Lists/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Book%20Lists"/><outline type="rss" text="E-Ink Displays" xmlUrl="https://scour.ing/@tyler/interests/E-Ink%20Displays/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/E-Ink%20Displays"/><outline type="rss" text="PostgreSQL" xmlUrl="https://scour.ing/@tyler/interests/PostgreSQL/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/PostgreSQL"/><outline type="rss" text="Minecraft" xmlUrl="https://scour.ing/@tyler/interests/Minecraft/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Minecraft"/><outline type="rss" text="Feed Readers" xmlUrl="https://scour.ing/@tyler/interests/Feed%20Readers/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Feed%20Readers"/><outline type="rss" text="Pour-Over Coffee" xmlUrl="https://scour.ing/@tyler/interests/Pour-Over%20Coffee/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Pour-Over%20Coffee"/><outline type="rss" text="Sim Racing" xmlUrl="https://scour.ing/@tyler/interests/Sim%20Racing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Sim%20Racing"/><outline type="rss" text="neovim" xmlUrl="https://scour.ing/@tyler/interests/neovim/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/neovim"/><outline type="rss" text="Zig" xmlUrl="https://scour.ing/@tyler/interests/Zig/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Zig"/><outline type="rss" text="Zed Editor" xmlUrl="https://scour.ing/@tyler/interests/Zed%20Editor/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Zed%20Editor"/><outline type="rss" text="Zero-Copy" xmlUrl="https://scour.ing/@tyler/interests/Zero-Copy/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Zero-Copy"/><outline type="rss" text="Writing Tools" xmlUrl="https://scour.ing/@tyler/interests/Writing%20Tools/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Writing%20Tools"/><outline type="rss" text="Window Managers" xmlUrl="https://scour.ing/@tyler/interests/Window%20Managers/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Window%20Managers"/><outline type="rss" text="WebRTC" xmlUrl="https://scour.ing/@tyler/interests/WebRTC/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/WebRTC"/><outline type="rss" text="WebGL" xmlUrl="https://scour.ing/@tyler/interests/WebGL/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/WebGL"/><outline type="rss" text="WebGPU" xmlUrl="https://scour.ing/@tyler/interests/WebGPU/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/WebGPU"/><outline type="rss" text="WebGPU Compute" xmlUrl="https://scour.ing/@tyler/interests/WebGPU%20Compute/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/WebGPU%20Compute"/><outline type="rss" text="WebCodecs" xmlUrl="https://scour.ing/@tyler/interests/WebCodecs/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/WebCodecs"/><outline type="rss" text="WebAssembly" xmlUrl="https://scour.ing/@tyler/interests/WebAssembly/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/WebAssembly"/><outline type="rss" text="Web Development" xmlUrl="https://scour.ing/@tyler/interests/Web%20Development/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Web%20Development"/><outline type="rss" text="Web Accessibility" xmlUrl="https://scour.ing/@tyler/interests/Web%20Accessibility/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Web%20Accessibility"/><outline type="rss" text="WASM" xmlUrl="https://scour.ing/@tyler/interests/WASM/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/WASM"/><outline type="rss" text="Vector Databases" xmlUrl="https://scour.ing/@tyler/interests/Vector%20Databases/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Vector%20Databases"/><outline type="rss" text="Typography" xmlUrl="https://scour.ing/@tyler/interests/Typography/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Typography"/><outline type="rss" text="TypeScript" xmlUrl="https://scour.ing/@tyler/interests/TypeScript/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/TypeScript"/><outline type="rss" text="Trail Running" xmlUrl="https://scour.ing/@tyler/interests/Trail%20Running/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Trail%20Running"/><outline type="rss" text="Text Editors" xmlUrl="https://scour.ing/@tyler/interests/Text%20Editors/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Text%20Editors"/><outline type="rss" text="Terminal UX" xmlUrl="https://scour.ing/@tyler/interests/Terminal%20UX/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Terminal%20UX"/><outline type="rss" text="Terminal Games" xmlUrl="https://scour.ing/@tyler/interests/Terminal%20Games/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Terminal%20Games"/><outline type="rss" text="Terminal Graphics" xmlUrl="https://scour.ing/@tyler/interests/Terminal%20Graphics/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Terminal%20Graphics"/><outline type="rss" text="Tech Policy" xmlUrl="https://scour.ing/@tyler/interests/Tech%20Policy/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Tech%20Policy"/><outline type="rss" text="Tech Essays" xmlUrl="https://scour.ing/@tyler/interests/Tech%20Essays/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Tech%20Essays"/><outline type="rss" text="Tauri" xmlUrl="https://scour.ing/@tyler/interests/Tauri/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Tauri"/><outline type="rss" text="Systems Programming" xmlUrl="https://scour.ing/@tyler/interests/Systems%20Programming/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Systems%20Programming"/><outline type="rss" text="System Design" xmlUrl="https://scour.ing/@tyler/interests/System%20Design/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/System%20Design"/><outline type="rss" text="Svelte" xmlUrl="https://scour.ing/@tyler/interests/Svelte/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Svelte"/><outline type="rss" text="Street Photography" xmlUrl="https://scour.ing/@tyler/interests/Street%20Photography/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Street%20Photography"/><outline type="rss" text="Static Sites" xmlUrl="https://scour.ing/@tyler/interests/Static%20Sites/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Static%20Sites"/><outline type="rss" text="Static Analysis" xmlUrl="https://scour.ing/@tyler/interests/Static%20Analysis/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Static%20Analysis"/><outline type="rss" text="Startups" xmlUrl="https://scour.ing/@tyler/interests/Startups/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Startups"/><outline type="rss" text="Spatial Computing" xmlUrl="https://scour.ing/@tyler/interests/Spatial%20Computing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Spatial%20Computing"/><outline type="rss" text="Software Licensing" xmlUrl="https://scour.ing/@tyler/interests/Software%20Licensing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Software%20Licensing"/><outline type="rss" text="Social Science" xmlUrl="https://scour.ing/@tyler/interests/Social%20Science/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Social%20Science"/><outline type="rss" text="Short Fiction" xmlUrl="https://scour.ing/@tyler/interests/Short%20Fiction/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Short%20Fiction"/><outline type="rss" text="Self-hosting" xmlUrl="https://scour.ing/@tyler/interests/Self-hosting/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Self-hosting"/><outline type="rss" text="Self-Hosting" xmlUrl="https://scour.ing/@tyler/interests/Self-Hosting/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Self-Hosting"/><outline type="rss" text="Search Engines" xmlUrl="https://scour.ing/@tyler/interests/Search%20Engines/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Search%20Engines"/><outline type="rss" text="Science Writing" xmlUrl="https://scour.ing/@tyler/interests/Science%20Writing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Science%20Writing"/><outline type="rss" text="SQLite" xmlUrl="https://scour.ing/@tyler/interests/SQLite/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/SQLite"/><outline type="rss" text="SIMD" xmlUrl="https://scour.ing/@tyler/interests/SIMD/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/SIMD"/><outline type="rss" text="Rust" xmlUrl="https://scour.ing/@tyler/interests/Rust/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Rust"/><outline type="rss" text="Running Analytics" xmlUrl="https://scour.ing/@tyler/interests/Running%20Analytics/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Running%20Analytics"/><outline type="rss" text="Retro Computing" xmlUrl="https://scour.ing/@tyler/interests/Retro%20Computing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Retro%20Computing"/><outline type="rss" text="React Native" xmlUrl="https://scour.ing/@tyler/interests/React%20Native/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/React%20Native"/><outline type="rss" text="Reactive Programming" xmlUrl="https://scour.ing/@tyler/interests/Reactive%20Programming/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Reactive%20Programming"/><outline type="rss" text="RSS" xmlUrl="https://scour.ing/@tyler/interests/RSS/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/RSS"/><outline type="rss" text="RAG" xmlUrl="https://scour.ing/@tyler/interests/RAG/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/RAG"/><outline type="rss" text="Query Optimization" xmlUrl="https://scour.ing/@tyler/interests/Query%20Optimization/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Query%20Optimization"/><outline type="rss" text="Queer Tech" xmlUrl="https://scour.ing/@tyler/interests/Queer%20Tech/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Queer%20Tech"/><outline type="rss" text="Quantified Self" xmlUrl="https://scour.ing/@tyler/interests/Quantified%20Self/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Quantified%20Self"/><outline type="rss" text="Python" xmlUrl="https://scour.ing/@tyler/interests/Python/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Python"/><outline type="rss" text="Prompt Engineering" xmlUrl="https://scour.ing/@tyler/interests/Prompt%20Engineering/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Prompt%20Engineering"/><outline type="rss" text="Progressive Web Apps" xmlUrl="https://scour.ing/@tyler/interests/Progressive%20Web%20Apps/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Progressive%20Web%20Apps"/><outline type="rss" text="Procedural Music" xmlUrl="https://scour.ing/@tyler/interests/Procedural%20Music/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Procedural%20Music"/><outline type="rss" text="Procedural Text" xmlUrl="https://scour.ing/@tyler/interests/Procedural%20Text/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Procedural%20Text"/><outline type="rss" text="Podcasts" xmlUrl="https://scour.ing/@tyler/interests/Podcasts/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Podcasts"/><outline type="rss" text="Photo Workflows" xmlUrl="https://scour.ing/@tyler/interests/Photo%20Workflows/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Photo%20Workflows"/><outline type="rss" text="Photography" xmlUrl="https://scour.ing/@tyler/interests/Photography/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Photography"/><outline type="rss" text="Personal Wiki" xmlUrl="https://scour.ing/@tyler/interests/Personal%20Wiki/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Personal%20Wiki"/><outline type="rss" text="Performance Monitoring" xmlUrl="https://scour.ing/@tyler/interests/Performance%20Monitoring/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Performance%20Monitoring"/><outline type="rss" text="Performance Profiling" xmlUrl="https://scour.ing/@tyler/interests/Performance%20Profiling/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Performance%20Profiling"/><outline type="rss" text="Parser Design" xmlUrl="https://scour.ing/@tyler/interests/Parser%20Design/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Parser%20Design"/><outline type="rss" text="PWA Tooling" xmlUrl="https://scour.ing/@tyler/interests/PWA%20Tooling/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/PWA%20Tooling"/><outline type="rss" text="Open Source" xmlUrl="https://scour.ing/@tyler/interests/Open%20Source/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Open%20Source"/><outline type="rss" text="Obsidian" xmlUrl="https://scour.ing/@tyler/interests/Obsidian/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Obsidian"/><outline type="rss" text="Observability" xmlUrl="https://scour.ing/@tyler/interests/Observability/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Observability"/><outline type="rss" text="Node.js" xmlUrl="https://scour.ing/@tyler/interests/Node.js/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Node.js"/><outline type="rss" text="Networking" xmlUrl="https://scour.ing/@tyler/interests/Networking/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Networking"/><outline type="rss" text="NLP" xmlUrl="https://scour.ing/@tyler/interests/NLP/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/NLP"/><outline type="rss" text="Mobile UX" xmlUrl="https://scour.ing/@tyler/interests/Mobile%20UX/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Mobile%20UX"/><outline type="rss" text="Microservices" xmlUrl="https://scour.ing/@tyler/interests/Microservices/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Microservices"/><outline type="rss" text="Message Queues" xmlUrl="https://scour.ing/@tyler/interests/Message%20Queues/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Message%20Queues"/><outline type="rss" text="Mesh Networks" xmlUrl="https://scour.ing/@tyler/interests/Mesh%20Networks/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Mesh%20Networks"/><outline type="rss" text="Memory Allocators" xmlUrl="https://scour.ing/@tyler/interests/Memory%20Allocators/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Memory%20Allocators"/><outline type="rss" text="Mechanical Keyboards" xmlUrl="https://scour.ing/@tyler/interests/Mechanical%20Keyboards/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Mechanical%20Keyboards"/><outline type="rss" text="Markdown" xmlUrl="https://scour.ing/@tyler/interests/Markdown/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Markdown"/><outline type="rss" text="Manufacturing" xmlUrl="https://scour.ing/@tyler/interests/Manufacturing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Manufacturing"/><outline type="rss" text="Machine Learning" xmlUrl="https://scour.ing/@tyler/interests/Machine%20Learning/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Machine%20Learning"/><outline type="rss" text="MUDs" xmlUrl="https://scour.ing/@tyler/interests/MUDs/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/MUDs"/><outline type="rss" text="Lua" xmlUrl="https://scour.ing/@tyler/interests/Lua/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Lua"/><outline type="rss" text="Longform Essays" xmlUrl="https://scour.ing/@tyler/interests/Longform%20Essays/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Longform%20Essays"/><outline type="rss" text="Local LLM" xmlUrl="https://scour.ing/@tyler/interests/Local%20LLM/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Local%20LLM"/><outline type="rss" text="Linux" xmlUrl="https://scour.ing/@tyler/interests/Linux/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Linux"/><outline type="rss" text="LSP Protocol" xmlUrl="https://scour.ing/@tyler/interests/LSP%20Protocol/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/LSP%20Protocol"/><outline type="rss" text="LLM Evals" xmlUrl="https://scour.ing/@tyler/interests/LLM%20Evals/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/LLM%20Evals"/><outline type="rss" text="LGBT" xmlUrl="https://scour.ing/@tyler/interests/LGBT/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/LGBT"/><outline type="rss" text="Knowledge Graphs" xmlUrl="https://scour.ing/@tyler/interests/Knowledge%20Graphs/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Knowledge%20Graphs"/><outline type="rss" text="Interactive Fiction" xmlUrl="https://scour.ing/@tyler/interests/Interactive%20Fiction/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Interactive%20Fiction"/><outline type="rss" text="Inform7" xmlUrl="https://scour.ing/@tyler/interests/Inform7/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Inform7"/><outline type="rss" text="Indie Web" xmlUrl="https://scour.ing/@tyler/interests/Indie%20Web/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Indie%20Web"/><outline type="rss" text="Indie Games" xmlUrl="https://scour.ing/@tyler/interests/Indie%20Games/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Indie%20Games"/><outline type="rss" text="IPFS" xmlUrl="https://scour.ing/@tyler/interests/IPFS/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/IPFS"/><outline type="rss" text="Hardware Hacking" xmlUrl="https://scour.ing/@tyler/interests/Hardware%20Hacking/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Hardware%20Hacking"/><outline type="rss" text="HTMX" xmlUrl="https://scour.ing/@tyler/interests/HTMX/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/HTMX"/><outline type="rss" text="Glitch Art" xmlUrl="https://scour.ing/@tyler/interests/Glitch%20Art/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Glitch%20Art"/><outline type="rss" text="Ghostty" xmlUrl="https://scour.ing/@tyler/interests/Ghostty/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Ghostty"/><outline type="rss" text="Git" xmlUrl="https://scour.ing/@tyler/interests/Git/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Git"/><outline type="rss" text="Gaming" xmlUrl="https://scour.ing/@tyler/interests/Gaming/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Gaming"/><outline type="rss" text="Game Mechanics" xmlUrl="https://scour.ing/@tyler/interests/Game%20Mechanics/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Game%20Mechanics"/><outline type="rss" text="Game Modding" xmlUrl="https://scour.ing/@tyler/interests/Game%20Modding/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Game%20Modding"/><outline type="rss" text="Game Engines" xmlUrl="https://scour.ing/@tyler/interests/Game%20Engines/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Game%20Engines"/><outline type="rss" text="Game Development" xmlUrl="https://scour.ing/@tyler/interests/Game%20Development/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Game%20Development"/><outline type="rss" text="Game AI" xmlUrl="https://scour.ing/@tyler/interests/Game%20AI/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Game%20AI"/><outline type="rss" text="Fuzzing" xmlUrl="https://scour.ing/@tyler/interests/Fuzzing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Fuzzing"/><outline type="rss" text="Fuzzy Matching" xmlUrl="https://scour.ing/@tyler/interests/Fuzzy%20Matching/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Fuzzy%20Matching"/><outline type="rss" text="Functional Programming" xmlUrl="https://scour.ing/@tyler/interests/Functional%20Programming/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Functional%20Programming"/><outline type="rss" text="Electronics" xmlUrl="https://scour.ing/@tyler/interests/Electronics/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Electronics"/><outline type="rss" text="Edge Computing" xmlUrl="https://scour.ing/@tyler/interests/Edge%20Computing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Edge%20Computing"/><outline type="rss" text="Docker" xmlUrl="https://scour.ing/@tyler/interests/Docker/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Docker"/><outline type="rss" text="Distributed Systems" xmlUrl="https://scour.ing/@tyler/interests/Distributed%20Systems/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Distributed%20Systems"/><outline type="rss" text="Digital Privacy" xmlUrl="https://scour.ing/@tyler/interests/Digital%20Privacy/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Digital%20Privacy"/><outline type="rss" text="Digital Nomadism" xmlUrl="https://scour.ing/@tyler/interests/Digital%20Nomadism/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Digital%20Nomadism"/><outline type="rss" text="Digital Gardens" xmlUrl="https://scour.ing/@tyler/interests/Digital%20Gardens/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Digital%20Gardens"/><outline type="rss" text="Developer Experience" xmlUrl="https://scour.ing/@tyler/interests/Developer%20Experience/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Developer%20Experience"/><outline type="rss" text="DevOps" xmlUrl="https://scour.ing/@tyler/interests/DevOps/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/DevOps"/><outline type="rss" text="Design Systems" xmlUrl="https://scour.ing/@tyler/interests/Design%20Systems/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Design%20Systems"/><outline type="rss" text="Databases" xmlUrl="https://scour.ing/@tyler/interests/Databases/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Databases"/><outline type="rss" text="Database Internals" xmlUrl="https://scour.ing/@tyler/interests/Database%20Internals/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Database%20Internals"/><outline type="rss" text="Database Design" xmlUrl="https://scour.ing/@tyler/interests/Database%20Design/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Database%20Design"/><outline type="rss" text="Data Sonification" xmlUrl="https://scour.ing/@tyler/interests/Data%20Sonification/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Data%20Sonification"/><outline type="rss" text="Data Structures" xmlUrl="https://scour.ing/@tyler/interests/Data%20Structures/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Data%20Structures"/><outline type="rss" text="Data Engineering" xmlUrl="https://scour.ing/@tyler/interests/Data%20Engineering/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Data%20Engineering"/><outline type="rss" text="Cybersecurity" xmlUrl="https://scour.ing/@tyler/interests/Cybersecurity/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Cybersecurity"/><outline type="rss" text="Cryptography" xmlUrl="https://scour.ing/@tyler/interests/Cryptography/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Cryptography"/><outline type="rss" text="Creative Writing" xmlUrl="https://scour.ing/@tyler/interests/Creative%20Writing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Creative%20Writing"/><outline type="rss" text="Creative Automation" xmlUrl="https://scour.ing/@tyler/interests/Creative%20Automation/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Creative%20Automation"/><outline type="rss" text="Creative Coding" xmlUrl="https://scour.ing/@tyler/interests/Creative%20Coding/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Creative%20Coding"/><outline type="rss" text="Concurrency" xmlUrl="https://scour.ing/@tyler/interests/Concurrency/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Concurrency"/><outline type="rss" text="Computing History" xmlUrl="https://scour.ing/@tyler/interests/Computing%20History/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Computing%20History"/><outline type="rss" text="Compression Algorithms" xmlUrl="https://scour.ing/@tyler/interests/Compression%20Algorithms/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Compression%20Algorithms"/><outline type="rss" text="Compilers" xmlUrl="https://scour.ing/@tyler/interests/Compilers/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Compilers"/><outline type="rss" text="Commonplace Books" xmlUrl="https://scour.ing/@tyler/interests/Commonplace%20Books/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Commonplace%20Books"/><outline type="rss" text="Cognitive Science" xmlUrl="https://scour.ing/@tyler/interests/Cognitive%20Science/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Cognitive%20Science"/><outline type="rss" text="Coffee" xmlUrl="https://scour.ing/@tyler/interests/Coffee/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Coffee"/><outline type="rss" text="Code Visualization" xmlUrl="https://scour.ing/@tyler/interests/Code%20Visualization/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Code%20Visualization"/><outline type="rss" text="Code Generation" xmlUrl="https://scour.ing/@tyler/interests/Code%20Generation/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Code%20Generation"/><outline type="rss" text="Cloudflare Workers" xmlUrl="https://scour.ing/@tyler/interests/Cloudflare%20Workers/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Cloudflare%20Workers"/><outline type="rss" text="Cloud Computing" xmlUrl="https://scour.ing/@tyler/interests/Cloud%20Computing/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Cloud%20Computing"/><outline type="rss" text="Choice Architecture" xmlUrl="https://scour.ing/@tyler/interests/Choice%20Architecture/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Choice%20Architecture"/><outline type="rss" text="Cellular Automata" xmlUrl="https://scour.ing/@tyler/interests/Cellular%20Automata/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Cellular%20Automata"/><outline type="rss" text="CSS Animation" xmlUrl="https://scour.ing/@tyler/interests/CSS%20Animation/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/CSS%20Animation"/><outline type="rss" text="CRDT" xmlUrl="https://scour.ing/@tyler/interests/CRDT/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/CRDT"/><outline type="rss" text="CDN" xmlUrl="https://scour.ing/@tyler/interests/CDN/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/CDN"/><outline type="rss" text="Boston Tech" xmlUrl="https://scour.ing/@tyler/interests/Boston%20Tech/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Boston%20Tech"/><outline type="rss" text="Bloom Filters" xmlUrl="https://scour.ing/@tyler/interests/Bloom%20Filters/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Bloom%20Filters"/><outline type="rss" text="Bevy" xmlUrl="https://scour.ing/@tyler/interests/Bevy/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Bevy"/><outline type="rss" text="Atproto" xmlUrl="https://scour.ing/@tyler/interests/Atproto/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Atproto"/><outline type="rss" text="Async Programming" xmlUrl="https://scour.ing/@tyler/interests/Async%20Programming/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Async%20Programming"/><outline type="rss" text="Assembly" xmlUrl="https://scour.ing/@tyler/interests/Assembly/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Assembly"/><outline type="rss" text="Apple" xmlUrl="https://scour.ing/@tyler/interests/Apple/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Apple"/><outline type="rss" text="Agent-Based Simulations" xmlUrl="https://scour.ing/@tyler/interests/Agent-Based%20Simulations/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/Agent-Based%20Simulations"/><outline type="rss" text="ActivityPub" xmlUrl="https://scour.ing/@tyler/interests/ActivityPub/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/ActivityPub"/><outline type="rss" text="APIs" xmlUrl="https://scour.ing/@tyler/interests/APIs/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/APIs"/><outline type="rss" text="API Design" xmlUrl="https://scour.ing/@tyler/interests/API%20Design/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/API%20Design"/><outline type="rss" text="AI Criticism" xmlUrl="https://scour.ing/@tyler/interests/AI%20Criticism/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/AI%20Criticism"/><outline type="rss" text="AI" xmlUrl="https://scour.ing/@tyler/interests/AI/rss.xml?as=tyler&amp;token=AQAAAEJntjo9fBFmLbt1vxY_GppfLBKB45_9r0DWoWIBJt1f" htmlUrl="https://scour.ing/@tyler/interests/AI"/></body></opml>
diff --git a/docs/plans/2026-08-15-implementation-notes.md b/docs/plans/2026-08-15-implementation-notes.md
new file mode 100644
index 0000000..efc3c72
--- /dev/null
+++ b/docs/plans/2026-08-15-implementation-notes.md
@@ -0,0 +1,82 @@
+# Implementation notes (shared brief for all implementation agents)
+
+Authoritative spec: `docs/plans/2026-08-15-the-daily-epub.md`. Read it fully before writing code.
+This file records implementation-time decisions and verified external facts. Follow both.
+
+## Verified external facts (2026-08-15)
+
+- **DeepSeek model id is confirmed**: `deepseek-v4-flash` (version DeepSeek-V4-Flash-0731).
+  Pricing per 1M tokens: $0.0028 cache-hit input, $0.14 cache-miss input, $0.28 output.
+  OpenAI-compatible API at `https://api.deepseek.com/v1`, supports `response_format: {"type":"json_object"}`.
+- **epub-to-xtc-converter** (github.com/bigbag/epub-to-xtc-converter) has **no global npm bin**.
+  It is invoked as: `node <repo>/cli/index.js convert book.epub -o book.xtch -f xtch -c settings.json`
+  (`-f xtc` = 1-bit, `-f xtch` = 2-bit grayscale; `init` subcommand generates default settings).
+  Therefore config must be fully general: `xtc.command = "node"`,
+  `xtc.args = ["/path/to/epub-to-xtc-converter/cli/index.js", "convert"]` and the code appends
+  `<input.epub> -o <output.xtch> -f <format>` (plus `-c <settings>`). Missing/failed converter is
+  non-fatal (log + continue).
+  - **Corrected 2026-08-15 (post-M8, verified by running it).** `-c` is *not* optional in
+    practice: the converter validates settings before opening the EPUB and exits **2** with
+    `Configuration errors: - Font path is required. Set font.path in your config file.` There is
+    no built-in font default, and the shipped `cli/settings.json` points at
+    `/usr/share/fonts/Adwaita/AdwaitaSans-Regular.ttf`, which most servers do not have. So
+    `xtc.settings` is effectively required whenever `xtc.enabled`. Deps also need
+    `npm install` **inside `cli/`** (commander, jszip, minimatch, sharp).
+  - **That same error also means "I could not read your config."** `loadSettings` in
+    `cli/settings.js` guards with `fs.existsSync(configPath)`, which returns `false` on
+    `EACCES` exactly as it does for a missing file, then silently falls back to
+    `DEFAULT_SETTINGS` (`font.path: null`). Since `/etc/daily-epub` is `0750
+    daily-epub:daily-epub`, running the converter by hand as any other account reproduces
+    the "Font path is required" error against a valid file. Verify as `sudo -u daily-epub`.
+  - **Output size.** XTCH is a pre-rendered page bitmap: 480×800 at 2bpp = ~96 KB/page. A
+    20-article issue rendered at `font.size = 34` came to 1,088 pages ≈ **104 MB**, in ~13 s.
+    `retention_days = 21` therefore implies ~2 GB in `publish.xtc_dir`.
+- **X4 firmware rendering limits** (from the `epub-to-xtc-converter` optimizer's header, which
+  cites papyrix-reader): 464×788 usable viewport, max image decode 2048×3072, **baseline JPEG
+  only**, no GIF/SVG/WebP, **max 1500 CSS rules and simple selectors only** (`tag`, `.class`,
+  `tag.class` — no descendant combinators), **max word length 200 chars**, images under 20 px
+  treated as decorative. These bind the `(X4).epub` read natively off BookOrbit; they do *not*
+  bind the `.xtch`, which CREngine pre-renders to page bitmaps (`convert` never calls
+  `optimizeEpub` — the two subcommands are independent). `epub/x4.rs` and `style-x4.css` satisfy
+  all of them; `x4::simplify_xhtml` soft-hyphenates past `MAX_WORD_CHARS` and
+  `the_x4_stylesheet_uses_no_descendant_selectors` guards the selector rule.
+- **Wikipedia Current Events portal pages are created empty a day ahead.**
+  `Portal:Current_events/2026_August_15` was created 2026-08-14T03:30Z as a 192-byte stub and
+  did not get its first news item until 2026-08-15T13:28Z. The 05:30 America/New_York timer
+  fires at ~09:30Z, so the issue day's own page is **always** an unpopulated stub — its only
+  `<li>` elements are the `current-events-navbar` edit/history/watch links, which the extractor
+  drops, so `extract_events` correctly returns `None`. `world::fetch_with_fallback` therefore
+  walks back up to `MAX_LOOKBACK_DAYS` and the section is datelined with the day it actually
+  covers, not the masthead date.
+
+## Cross-cutting implementation decisions
+
+1. **sqlx usage**: use *runtime* queries (`sqlx::query(...).bind(...)`) and manual row mapping
+   (or `sqlx::FromRow` derive with `query_as`). Do **not** use the compile-time checked
+   `query!`/`query_as!` macros (they require DATABASE_URL/offline data at build time).
+   Migrations via `sqlx::migrate!("./migrations")` embedded at compile time.
+2. **Time**: `jiff` everywhere; day boundaries and `--date` interpretation in the configured
+   timezone (`America/New_York` default). Store timestamps in SQLite as RFC3339 UTC strings.
+3. **Errors**: modules return `thiserror` error types or `anyhow::Result`; `main.rs` uses `anyhow`.
+   Pipeline stages are best-effort where the spec says so (social, XTC, world briefing, images).
+4. **HTTP**: one shared `reqwest::Client` (rustls, gzip, no cookies, 10s timeouts, UA
+   `the-daily-epub/1.0 (personal rss digest; contact tyler@hallada.net)`), passed by clone.
+5. **LLM**: `async-openai` with custom base URL. All LLM calls go through `curate/llm.rs`
+   `LlmClient` which tracks token usage into a shared `UsageMeter` (input/cached/output tokens,
+   cost usd) and enforces `max_daily_usd`.
+6. **Testing**: unit tests inline per module; integration tests in `tests/` over fixture JSON in
+   `tests/fixtures/`. Never hit the network in tests. LLM stage mockable via `--skip-llm`
+   (prefilter order used for selection, feed excerpts as summaries).
+7. **Style**: rustfmt defaults, `cargo clippy` clean-ish, no `unwrap()` outside tests, tracing
+   spans per pipeline stage.
+8. **File ownership**: waves of agents work in parallel on disjoint files. Do not edit files
+   outside your assigned set (module wiring in `main.rs`/`mod.rs` is done by the scaffold and
+   the integration wave). If you need a helper from another module that doesn't exist yet, add
+   a `// TODO(integration): ...` note and code against the stub signature.
+9. **Dedupe module**: normalize/dedupe (§3.2) lives in `src/dedupe.rs` (canonical URL fn +
+   clustering), called from the generate pipeline between ingest and extraction.
+10. **World briefing** (§3.8) lives in `src/world.rs`.
+11. **Askama templates** in `src/epub/templates/` (`*.xhtml` askama templates + `style.css`,
+    `style-x4.css`). Askama 0.12+ configured via `askama.toml` if needed.
+12. **Determinism**: chapter ids `art-{entry_id}`, stable filenames, issue regeneration for the
+    same date replaces prior rows/files (idempotent upsert everywhere).
diff --git a/docs/plans/2026-08-15-the-daily-epub.md b/docs/plans/2026-08-15-the-daily-epub.md
new file mode 100644
index 0000000..ee4c7ff
--- /dev/null
+++ b/docs/plans/2026-08-15-the-daily-epub.md
@@ -0,0 +1,372 @@
+# The Daily EPUB — Project Plan
+
+
+## 1. Overview
+
+**The Daily EPUB** is a Rust service that generates a personalized daily newspaper as an EPUB. Every morning it:
+
+1. Pulls the last ~24h of entries from a self-hosted **Miniflux** instance (300–500 articles/day).
+2. Deduplicates, extracts full text, and enriches entries with social-proof signals (HackerNews, Lobsters, Reddit).
+3. Applies cheap heuristic pre-filters, then uses **DeepSeek V4 Flash** to score, select, and organize ~15–25 articles into newspaper sections.
+4. Generates editorial framing: a front-page "day in brief," section intros, and per-article summaries.
+5. Builds two EPUB editions (standard + Xteink X4-optimized), converts the X4 edition to XTC/XTCH.
+6. Publishes into a dedicated **BookOrbit** library via watched folder (→ OPDS for KOReader devices) and serves XTC via a minimal built-in OPDS feed.
+7. Collects 👍/👎 feedback via rating links inside the EPUB to continuously improve curation.
+
+**Reader profile (bake into curation prompts):** prefers long-form, high-effort, well-written articles on *any* topic; uses social proof (HN/Reddit upvotes+comments) as a quality proxy; wants tech news, light general/US world news (prefers Wikipedia Current Events for world news), Boston-area news, and ultra-niche community news. The full interest list lives in `data/scour-interests.opml` (~220 Scour interests: Rust, systems programming, e-ink, self-hosting, PKM, sci-fi, creative coding, space, running, board games, Boston Tech, etc.) — compile it into the taste profile at build time.
+
+### Existing infrastructure (all on this server)
+
+| Service | Local | External | Notes |
+|---|---|---|---|
+| Miniflux | `127.0.0.1:8082` | `miniflux.hallada.net` | Installed via PPA. API auth via `X-Auth-Token` header. |
+| BookOrbit | `127.0.0.1:3498` | `bookorbit.hallada.net` | NestJS/Vue/Postgres. Supports multiple isolated libraries, per-library watched folders, OPDS at `/api/v1/opds` (Basic auth, `opds_access` permission). |
+| The Daily EPUB (new) | `127.0.0.1:<port, e.g. 3499>` | `daily.hallada.net` (reverse proxy to be added) | Rating endpoints + XTC OPDS + static files. |
+
+### Secrets/config the operator must provide
+
+- `MINIFLUX_API_KEY` (create in Miniflux: Settings → API Keys)
+- `DEEPSEEK_API_KEY`
+- `DAILY_EPUB_SECRET` (random 32+ bytes; HMAC for rating links)
+- BookOrbit: create a "The Daily EPUB" library with its own folder, enable **Watch folders** for it; note the folder path for config.
+- Reverse proxy entry for `daily.hallada.net` → `127.0.0.1:3499` (rating links must be reachable from devices on the internet; TLS via existing setup).
+- Node.js 18+ and `epub-to-xtc-converter` CLI installed (`npm i -g` per its README) for XTC output.
+
+### Prior art studied
+
+- **feedpaper** (heyjonny.dev / jonashonecker/feedpaper): Feedbin → filter unsuitable feeds → EPUB → manual copy to X4. Lesson: filter out YouTube/link-only/JS-heavy sources early; simplicity works.
+- **inkfeed** (adhamsalama/inkfeed): Go backend, Mozilla Readability extraction, MOBI/EPUB export, special handling for Reddit JSON and Google News redirects. Lesson: robust content extraction is the hard part.
+- **Calibre news system** (manual.calibre-ebook.com/news.html): recipe model — masthead, per-section feeds, article cleanup hooks, index pages. We mirror its structure: cover → front page → sections → articles.
+
+---
+
+## 2. Architecture
+
+Single Rust binary crate `daily-epub` (workspace not needed yet) with clap subcommands:
+
+```
+daily-epub generate [--date YYYY-MM-DD] [--dry-run] [--out DIR] [--max-articles N] [--skip-llm]
+daily-epub serve                # long-running: rating endpoints + XTC OPDS + static
+daily-epub profile rebuild      # regenerate taste profile from ratings (also runs weekly inside generate)
+daily-epub backfill-social      # re-poll social scores for recent entries (optional helper)
+daily-epub db migrate           # run sqlx migrations (also auto-run on start)
+```
+
+`generate` is invoked by a systemd timer each morning; `serve` runs as a persistent systemd service. Both share one SQLite database.
+
+### Pipeline (inside `generate`)
+
+```
+Miniflux ingest → normalize/dedupe → content extraction → social enrichment
+  → heuristic pre-filter (500 → ~120) → LLM scoring (batched) → LLM selection (~120 → 15–25)
+  → comment fetching for selected → LLM editorial (summaries, section intros, front page)
+  → EPUB build (standard + X4 editions) → XTC conversion → publish (BookOrbit folder, XTC dir, OPDS xml)
+  → retention pruning → run report logged + stored
+```
+
+Every stage writes to SQLite so the run is resumable/idempotent per date: re-running `generate --date X` replaces that issue.
+
+### Repository layout
+
+```
+the-daily-epub/
+├── Cargo.toml
+├── config.example.toml
+├── data/scour-interests.opml          # (already present)
+├── docs/plans/
+├── migrations/                        # sqlx sqlite migrations
+├── systemd/
+│   ├── daily-epub.service             # serve
+│   ├── daily-epub-generate.service    # oneshot
+│   └── daily-epub-generate.timer
+├── src/
+│   ├── main.rs                        # clap dispatch
+│   ├── config.rs                      # figment: TOML + env overrides
+│   ├── db.rs                          # sqlx pool, queries
+│   ├── miniflux.rs                    # API client
+│   ├── extract.rs                     # readability + sanitization + word counts
+│   ├── social/
+│   │   ├── mod.rs                     # SocialRef model, orchestrator
+│   │   ├── hn.rs                      # Algolia search + item tree
+│   │   ├── lobsters.rs                # /s/{id}.json
+│   │   └── reddit.rs                  # api/info.json + comments .json
+│   ├── curate/
+│   │   ├── prefilter.rs               # heuristics + feed priors
+│   │   ├── llm.rs                     # DeepSeek client (async-openai, custom base)
+│   │   ├── score.rs                   # batched scoring stage
+│   │   ├── select.rs                  # lineup selection stage
+│   │   ├── editorial.rs              # summaries, intros, front page
+│   │   └── profile.rs                # taste profile build/rebuild
+│   ├── comments.rs                    # comment tree → rendered XHTML
+│   ├── epub/
+│   │   ├── build.rs                   # epub-builder assembly
+│   │   ├── templates/                 # askama XHTML templates + CSS
+│   │   ├── images.rs                  # download, resize, grayscale, re-encode
+│   │   └── x4.rs                      # X4 edition transforms + XTC CLI invocation
+│   ├── publish.rs                     # copy to BookOrbit folder, OPDS xml gen, retention
+│   ├── server.rs                      # axum: /r/… ratings, /opds/xtc.xml, /files/…
+│   └── report.rs                      # run summary (counts, cost, timings)
+└── tests/                             # integration tests with fixture JSON
+```
+
+### Crate choices (all popular, well-maintained)
+
+| Concern | Crate |
+|---|---|
+| async runtime | `tokio` |
+| HTTP client | `reqwest` (rustls-tls, gzip, cookies off) |
+| HTTP server | `axum` + `tower-http` (trace, fs) |
+| serialization | `serde`, `serde_json` |
+| DB | `sqlx` (sqlite, runtime-tokio, migrations) |
+| CLI | `clap` (derive) |
+| config | `figment` (TOML file + `DAILY_EPUB_*` env) |
+| errors | `thiserror` (lib-ish modules) + `anyhow` (top level) |
+| logging | `tracing` + `tracing-subscriber` (env-filter) |
+| time | `jiff` (tz-aware; day boundaries in `America/New_York`) |
+| feeds/URLs | `url`; (feed parsing not needed — Miniflux does it) |
+| readability | `dom_smoothie` (Rust port of Mozilla Readability; fallback `readability` crate if issues) |
+| HTML manipulation | `scraper` (select/rewrite), `ammonia` (sanitize to safe XHTML subset) |
+| templating | `askama` (typed XHTML templates) |
+| EPUB | `epub-builder` (EPUB3, nav TOC, resources, cover) |
+| images | `image` (decode, resize, grayscale, JPEG encode) |
+| LLM | `async-openai` with `OpenAIConfig::new().with_api_base("https://api.deepseek.com/v1")` |
+| auth tokens | `hmac` + `sha2`, `hex` |
+| retry | `backoff` or hand-rolled with `tokio::time` (jittered exponential, max 3) |
+
+---
+
+## 3. Stage details
+
+### 3.1 Miniflux ingestion (`miniflux.rs`)
+
+- Client for `http://127.0.0.1:8082/v1`, header `X-Auth-Token`.
+- `GET /v1/entries?order=published_at&direction=desc&published_after=<unix>&limit=250&offset=…` — page through everything published in the window `[now - lookback_hours (default 26h), now]`, **regardless of read/unread status** (never mutate read state; this must not disturb normal reader usage).
+- Also `GET /v1/feeds` once per run to map `feed_id → {title, site_url, category.title}`.
+- Persist raw entries. Fields used: `id`, `feed_id`, `title`, `url`, `comments_url` (hnrss/lobsters populate this — free social linkage!), `author`, `published_at`, `content` (Miniflux's stored content — full text if the feed's "fetch original content" is on, else the feed summary).
+- Watermark per run stored in `kv` table; the window overlap + upsert-by-entry-id makes re-runs safe.
+
+### 3.2 Normalize & dedupe
+
+- **Canonical URL:** lowercase host, strip fragments, strip tracking params (`utm_*`, `ref`, `fbclid`, `gclid`, `s`, `si`), trim trailing `/`, resolve known redirectors (Google News links → target param).
+- **Cluster duplicates** (same story via HN frontpage feed + Scour feed + the blog's own feed): primary key = canonical URL; secondary fuzzy pass = normalized title (lowercased, alphanumeric-only) exact match within the window. Merge into one `article` row keeping: the richest content, the union of social refs, and a `sources` list (used as a curation signal — appearing in multiple feeds is itself social proof; specifically flag "came via Scour" and "came via HN frontpage").
+- Drop obvious non-articles early: audio/video enclosure-only entries, entries whose URL host is youtube/vimeo/spotify, empty-title entries.
+
+### 3.3 Content extraction (`extract.rs`)
+
+Priority order per article:
+1. Miniflux `content` if it looks like full text (word count ≥ 250 or ≥ 80% of a fetched version).
+2. Fetch `url` (10s timeout, desktop UA, max 3 MB) → `dom_smoothie` readability → main content HTML.
+3. Fallback: feed summary/excerpt with a "(excerpt only — read online)" note; such articles are penalized in pre-filter unless social score is high.
+
+Then: sanitize with `ammonia` (allow: p, h1–h4, ul/ol/li, blockquote, pre, code, em, strong, a, img, figure, figcaption, table basics, hr, br), compute `word_count`, collect image URLs (cap 12/article), detect paywall heuristically (very short text + known paywall domains list) → mark `excerpt_only`.
+
+### 3.4 Social enrichment (`social/`)
+
+For every deduped article (cheap, parallel with a semaphore of ~8, aggressive caching in `social` table):
+
+- **HackerNews** (Algolia, free, generous limits):
+  - If `comments_url` is `news.ycombinator.com/item?id=N` → that's the story id.
+  - Else `GET https://hn.algolia.com/api/v1/search?query=<canonical_url>&restrictSearchableAttributes=url` → take best hit. Store `points`, `num_comments`, `objectID`.
+- **Lobsters:** only when the article arrived via a lobste.rs feed or `comments_url` points at `lobste.rs/s/<id>` (no public URL-search API) → later fetch `https://lobste.rs/s/<id>.json` for score + comments.
+- **Reddit:** `GET https://www.reddit.com/api/info.json?url=<canonical_url>` with a descriptive User-Agent (`the-daily-epub/1.0 (personal rss digest; contact tyler@hallada.net)`) → best post by score; store `score`, `num_comments`, `permalink`. Respect ~1 req/sec pacing; on 429 back off and continue (social data is best-effort).
+- **X/Twitter:** **not supported** — no free API. Documented limitation; the `source` enum leaves room to add it later.
+
+Composite `social_score = log10(1 + hn_points) + 0.7*log10(1 + reddit_score) + log10(1 + lobsters_score) + 0.5*log10(1 + total_comments)`.
+
+### 3.5 Heuristic pre-filter (`curate/prefilter.rs`) — 300–500 → ~120
+
+Score each article 0–100; keep top `prefilter_keep` (default 120) plus all auto-includes:
+
+- **Auto-include:** articles from feeds in the configured `always_include_feeds` list (the infrequent personal blogs Tyler always reads) skip filtering *and* LLM scoring is still run for section/summary purposes but they can't be dropped.
+- `+` word count (long-form preference: 0 pts <300 words, scaling to max at ~2500+)
+- `+` social_score (scaled)
+- `+` came via Scour (it already matched his interests), `+` came via HN frontpage
+- `+` feed prior (see §3.9: per-feed Bayesian upvote rate from ratings history)
+- `−` excerpt_only, `−` title looks like link-roundup/release-notes/sponsor post (regex list), `−` domain on a configurable blocklist
+- **Dedup vs. history:** exclude anything already included in a previous issue (`issue_articles`), and anything the LLM scored < 3 within the last 7 days (don't re-score churn).
+
+This stage is pure Rust, free, and keeps LLM cost flat as feed volume grows.
+
+### 3.6 LLM curation (`curate/llm.rs`, `score.rs`, `select.rs`) — DeepSeek V4 Flash
+
+Client: `async-openai` against `https://api.deepseek.com/v1`, model id from config (default `deepseek-v4-flash` — **verify exact model id against DeepSeek docs at implementation time**), `response_format: json_object`, temperature 0.3 for scoring / 0.8 for editorial. DeepSeek automatically prefix-caches, so put the (identical, long) system prompt first in every request: cached input is $0.0028/M vs $0.14/M.
+
+**Taste profile (system prompt core, `curate/profile.rs`):** a ~600-word document assembled from: (a) the interest names parsed out of `data/scour-interests.opml`, grouped into themes; (b) hard-coded stated preferences (long-form, effort, any topic if excellent, social proof matters, Boston local, ultra-niche community news, Wikipedia-style neutral world news); (c) a "learned adjustments" section regenerated weekly by an LLM call that summarizes recent 👍/👎 ratings ("consistently downvotes: crypto press releases; consistently upvotes: database internals deep-dives…"). Stored in the DB (`kv`) and versioned.
+
+**Stage A — scoring (batched):** batches of 12 articles per request. Per article send: title, source feed, author, word count, social stats, sources list, and a ~200-word excerpt. Output JSON per article: `{id, score: 0-10, category, rationale (≤20 words), is_paywalled_guess}`. ~120 articles = 10 requests ≈ 90k input (mostly cache-miss article text) + ~4k output ≈ **$0.02**.
+
+**Stage B — lineup selection (single call):** send the top ~40 by combined score (LLM score weighted with social + priors) with their rationales. Output: final 15–25 picks (`target_article_count` config, default 20), each assigned a **section**, an ordering, and one flagged `lead_story`. Sections chosen from a configured palette (LLM may only use these): *Top Stories; Tech & Engineering; Science & Space; AI & Machine Learning; Culture & Essays; Boston & Local; Niche Corner; From the Blogroll* (auto-includes land here by default); *World Briefing* is reserved (§3.8). Empty sections are omitted.
+
+**Stage C — editorial:**
+- Per selected article, one call with full text (truncated to ~5k tokens): 2–3 sentence summary written like a newspaper abstract (what it argues, why it's worth reading — not clickbait). 20 calls ≈ 100k input / 3k output ≈ **$0.015**.
+- One call for the front page: given the lineup + summaries, write "**From the Editor**" — 250–400 words identifying the day's themes and guiding the read — plus a 2–3 sentence intro per section. Voice: warm, literate, a little playful; never fabricates facts not present in the summaries.
+
+**Cost guardrail:** track token usage per run (returned in API responses) in `runs`; config `max_daily_usd` (default 2.00) — if exceeded mid-run, skip remaining editorial calls and fall back to feed excerpts as summaries, log loudly. Expected steady-state cost: **≈ $0.05–0.30/day**, far under the $5 ceiling, with headroom to feed more/fuller text later.
+
+### 3.7 Comment chapters (`comments.rs`)
+
+For each **selected** article with social refs:
+
+- **HN:** `GET https://hn.algolia.com/api/v1/items/{objectID}` → full tree.
+- **Lobsters:** `GET https://lobste.rs/s/{id}.json`.
+- **Reddit:** `GET https://www.reddit.com{permalink}.json?limit=100&depth=3&sort=top`.
+
+Rendering (heuristic, no LLM): pick top ~8 top-level threads by score, depth ≤ 3, ≤ 4 children per node, per-comment cap 1,200 chars (ellipsize), whole chapter cap ~4,000 words. Render as nested `<blockquote>`-style indentation with author + points + relative depth styling that reads well on e-ink (no color, border-left indent). Sanitize with `ammonia`. Each discussion becomes its own chapter titled "💬 Discussion: {article title} ({N} comments on {source})", placed immediately after its article and nested under it in the TOC. Multiple sources = one chapter with per-source subsections, ordered HN → Lobsters → Reddit.
+
+### 3.8 World Briefing (Wikipedia Current Events)
+
+Since Tyler prefers Wikipedia's Current Events portal for world news, include it directly rather than curating wire-service articles: fetch the day's portal page (`https://en.wikipedia.org/wiki/Portal:Current_events/{YYYY}_{Month}_{D}` via the MediaWiki REST HTML API), extract the day's bulleted events, strip citations/edit links, keep internal links as plain text, and render as a compact "World Briefing" section chapter with CC BY-SA attribution + link. Config-toggleable (`world_briefing = true`). Failure is non-fatal (skip section).
+
+### 3.9 Feedback loop (`server.rs` + `curate/profile.rs`)
+
+- Each article chapter ends with a footer:
+  `Was this a good pick? [ 👍 Yes ] · [ 👎 No ]` + `Read online ↗` (original URL).
+- Link format: `https://daily.hallada.net/r/{issue_date}/{article_id}/{up|down}?t={token}` where `token = hex(hmac_sha256(secret, "{issue_date}/{article_id}/{vote}"))[..16]`. GET (KOReader opens links in its built-in browser/prompt; GET is the only thing that works from an e-reader). Idempotent upsert; response is a tiny static HTML page ("Recorded 👍 — thanks!") sized for e-ink browsers.
+- Ratings drive: (a) **feed priors** — per-feed `(upvotes+1)/(upvotes+downvotes+2)` beta-smoothed score used in pre-filter; (b) the weekly **learned adjustments** rewrite of the taste profile (§3.6).
+- Future (out of v1 scope, schema-ready): embedding-based classifier — `fastembed` (bge-small ONNX) embeddings + `linfa` logistic regression over rated articles as an additional pre-filter signal once ≥ ~200 ratings exist.
+
+### 3.10 EPUB assembly (`epub/`)
+
+Built with `epub-builder` (EPUB3 + nav + NCX fallback), content pages from `askama` templates, all assets embedded (fully offline). Structure:
+
+1. **Cover** — generated PNG: masthead "The Daily EPUB", date ("Friday, August 15, 2026"), issue number (days since first issue), article count. Render simple typographic SVG → rasterize (via `resvg`+`tiny-skia` — small, pure Rust) at 1200×1600 (standard) / 480×800 grayscale (X4).
+2. **From the Editor** — front-page brief + issue stats line ("22 articles · ~1h 45m read · 6 sections").
+3. **In This Issue** — the introduction chapter: per-section, each article's title, source, reading time, and its 2–3 sentence summary, linked to the chapter.
+4. **Sections** — section title page (name + LLM intro), then article chapters: header (title, author, source, date, word count/reading time, social stats line "▲ 342 on HN · 210 comments"), cleaned body with embedded images, footer (rating links + read-online link). Discussion chapter follows when present.
+5. **World Briefing** section (when enabled).
+6. **Colophon** — generation timestamp, models used, token cost, source feed counts.
+
+TOC: nav depth 2 (sections → articles, discussions nested). Metadata: `dc:title` "The Daily EPUB — 2026-08-15", `dc:creator` "The Daily EPUB", `dc:date`, `dc:language en`, EPUB3 `belongs-to-collection` = "The Daily EPUB" with `group-position` = issue number (BookOrbit/KOReader sort correctly). Deterministic chapter ids (`art-{entry_id}`) so rating links and TOC stay stable across regenerations.
+
+**Images (`epub/images.rs`):** download (10s timeout, 5 MB cap, semaphore 8), re-encode with `image`:
+- *Standard edition:* max width 1200px, JPEG q80 (PNG kept for line art/transparency after white-flatten), strip metadata (re-encode does), skip decorative images < 24px, drop SVG/WebP-source images unless decodable, per-issue asset budget ~25 MB.
+- *X4 edition (`epub/x4.rs`):* grayscale (Luma8), fit within 480×800, JPEG q70, flatten transparency to white; simplified CSS (no floats/flex/grid, no embedded fonts, larger base font, generous line-height, hyphenation on); cover at native 480×800. (These mirror what `epub-to-xtc-converter` recommends, so the XTC conversion step has ideal input.)
+- Every `<img>` gets `alt` preserved and a `<figcaption>` if source had one; failed downloads degrade to a "[image: alt text]" placeholder paragraph.
+
+**CSS:** one small stylesheet per edition tuned for e-ink: serif body, no colors other than grayscale, `page-break-before` on chapters, blockquote-indent comment styling.
+
+### 3.11 XTC conversion & publishing (`publish.rs`)
+
+- Run the `epub-to-xtc-converter` CLI (Node 18+) on the X4 edition: invoke via `tokio::process::Command`, config keys `xtc.command` (default `epub-to-xtc`) and `xtc.args` (verify exact CLI name/flags from the repo README at implementation time; support both `.xtc` 1-bit and `.xtch` 4-level grayscale via config, default XTCH for image quality). Non-zero exit → log error, continue (XTC is a bonus artifact).
+- **Publish standard + X4 EPUBs** by atomic copy (`write temp + rename`) into the BookOrbit "The Daily EPUB" library watched folder (`publish.bookorbit_dir`), filenames `The Daily EPUB - 2026-08-15.epub` and `The Daily EPUB - 2026-08-15 (X4).epub`. BookOrbit's watcher auto-imports; the library appears as its own section in BookOrbit's OPDS catalog (`/api/v1/opds`, Basic auth with an OPDS account) — KOReader on Kindle/Palma and CrossPoint on the X4 browse that. Main library stays uncluttered.
+- **XTC delivery:** copy `.xtch/.xtc` into `publish.xtc_dir`; regenerate a static **OPDS 1.2 acquisition feed** (`xtc.xml`, entries typed `application/octet-stream`, newest first, last 14) served by `daily-epub serve` at `/opds/xtc.xml` with files under `/files/xtc/` (optional Basic auth from config). CrossPoint's OPDS browser can fetch these; worst case the X4 uses the X4 EPUB from BookOrbit instead.
+- **Retention:** delete issue files older than `retention_days` (default 21) from both dirs (BookOrbit's scan removes the DB entries); SQLite issue/rating history is kept forever (it's the training data).
+
+### 3.12 Server (`server.rs`)
+
+axum on `127.0.0.1:3499`:
+- `GET /r/{date}/{article_id}/{vote}?t=` — verify HMAC, upsert rating, tiny HTML response. No auth beyond the token (links live inside a private EPUB; tokens are per-article+vote and unguessable).
+- `GET /opds/xtc.xml`, `GET /files/xtc/{name}` — optional Basic auth.
+- `GET /healthz`, `GET /issues.json` (recent run reports; handy for debugging).
+- `tower-http` request tracing; graceful shutdown on SIGTERM.
+
+### 3.13 Database schema (sqlite, `migrations/`)
+
+```sql
+entries(id INTEGER PRIMARY KEY,            -- miniflux entry id
+  feed_id INT, feed_title TEXT, category TEXT, title TEXT, url TEXT,
+  canonical_url TEXT, author TEXT, published_at TEXT, comments_url TEXT,
+  raw_content TEXT, fetched_at TEXT);
+articles(id INTEGER PRIMARY KEY AUTOINCREMENT,   -- deduped cluster
+  canonical_url TEXT UNIQUE, title TEXT, best_entry_id INT REFERENCES entries(id),
+  content_html TEXT, word_count INT, excerpt_only BOOL, image_count INT,
+  sources_json TEXT, first_seen TEXT);
+social(article_id INT, source TEXT CHECK(source IN ('hn','lobsters','reddit','x')),
+  item_id TEXT, score INT, num_comments INT, item_url TEXT, fetched_at TEXT,
+  PRIMARY KEY (article_id, source));
+scores(article_id INT, run_date TEXT, prefilter_score REAL, llm_score REAL,
+  llm_category TEXT, rationale TEXT, PRIMARY KEY (article_id, run_date));
+issues(date TEXT PRIMARY KEY, issue_number INT, generated_at TEXT,
+  epub_path TEXT, x4_path TEXT, xtc_path TEXT, front_page_html TEXT, report_json TEXT);
+issue_articles(issue_date TEXT, article_id INT, section TEXT, position INT,
+  is_lead BOOL, summary TEXT, PRIMARY KEY (issue_date, article_id));
+ratings(issue_date TEXT, article_id INT, vote INT CHECK(vote IN (-1,1)),
+  rated_at TEXT, PRIMARY KEY (issue_date, article_id));
+feed_priors(feed_id INT PRIMARY KEY, upvotes INT, downvotes INT, included INT);
+runs(id INTEGER PRIMARY KEY AUTOINCREMENT, date TEXT, started_at TEXT, finished_at TEXT,
+  entries_fetched INT, candidates INT, selected INT,
+  input_tokens INT, cached_tokens INT, output_tokens INT, cost_usd REAL, status TEXT, error TEXT);
+kv(key TEXT PRIMARY KEY, value TEXT);      -- watermark, taste_profile, profile_version
+```
+
+### 3.14 Configuration (`config.example.toml`)
+
+```toml
+timezone = "America/New_York"
+lookback_hours = 26
+target_article_count = 20
+prefilter_keep = 120
+retention_days = 21
+max_daily_usd = 2.0
+world_briefing = true
+
+[miniflux]
+base_url = "http://127.0.0.1:8082"
+# api_key via DAILY_EPUB_MINIFLUX__API_KEY env
+
+[deepseek]
+base_url = "https://api.deepseek.com/v1"
+model = "deepseek-v4-flash"        # verify exact id
+# api_key via env
+
+[curation]
+always_include_feeds = []           # miniflux feed ids or site urls
+blocked_domains = []
+sections = ["Top Stories", "Tech & Engineering", "Science & Space",
+  "AI & Machine Learning", "Culture & Essays", "Boston & Local",
+  "Niche Corner", "From the Blogroll"]
+
+[publish]
+bookorbit_dir = "/srv/bookorbit/libraries/daily-epub"
+xtc_dir = "/var/lib/daily-epub/xtc"
+
+[xtc]
+enabled = true
+command = "epub-to-xtc"             # verify CLI name/flags from repo
+format = "xtch"                     # xtc | xtch
+
+[server]
+bind = "127.0.0.1:3499"
+public_url = "https://daily.hallada.net"
+# hmac_secret via env; optional basic auth user/pass for OPDS
+```
+
+### 3.15 Deployment (systemd, `systemd/`)
+
+- `daily-epub.service`: `ExecStart=/usr/local/bin/daily-epub serve`, `Restart=on-failure`, hardening (`DynamicUser` or dedicated user, `StateDirectory=daily-epub`, `ProtectSystem=strict` with write access to publish dirs).
+- `daily-epub-generate.service` (oneshot) + `daily-epub-generate.timer`: `OnCalendar=*-*-* 05:30:00 America/New_York`, `Persistent=true` (catch up after downtime), `RandomizedDelaySec=300`.
+- Install: `cargo build --release`, copy binary, `systemctl enable --now`. Reverse-proxy `daily.hallada.net` → `127.0.0.1:3499`.
+
+---
+
+## 4. Implementation milestones (each independently verifiable)
+
+1. **M1 — Skeleton & ingest:** crate scaffold, config, migrations, `miniflux.rs`, `generate --dry-run` prints fetched entry stats. *Verify: run against live Miniflux, see ~daily volume.*
+2. **M2 — Dedupe + extraction + social:** articles table populated with full text, word counts, HN/Reddit/Lobsters scores. *Verify: spot-check known HN stories carry correct points.*
+3. **M3 — Pre-filter + LLM scoring/selection:** end-to-end lineup JSON printed in dry-run; token/cost report. *Verify: lineup is sane; cost < $0.50.*
+4. **M4 — EPUB standard edition + publish:** full issue EPUB with cover, front page (temporary plain summaries), sections, articles, images; lands in BookOrbit, visible via OPDS on Kindle. *Verify: epubcheck clean; opens in KOReader with working TOC.*
+5. **M5 — Editorial + comments:** DeepSeek summaries/intros/front page wired in; discussion chapters. *Verify: read an issue; comments legible on e-ink.*
+6. **M6 — X4 edition + XTC + XTC OPDS:** second edition, converter invocation, static OPDS feed. *Verify: X4 fetches and renders both.*
+7. **M7 — Feedback loop:** `serve` rating endpoints, links in chapters, feed priors in pre-filter, weekly profile rebuild. *Verify: tap 👍 in KOReader → row in `ratings` → prior changes next run.*
+8. **M8 — Hardening & ops:** systemd units, retention, cost guardrail, run reports, `issues.json`, README.
+
+## 5. Verification (end-to-end)
+
+- `cargo test` — unit tests: URL canonicalization, dedupe clustering, HMAC round-trip, comment-tree truncation, prefilter scoring; integration tests over fixture JSON (recorded Miniflux/Algolia/Reddit responses) with the LLM stage mocked (`--skip-llm` uses prefilter order).
+- `daily-epub generate --dry-run --out ./out --max-articles 6` with real keys → inspect `./out/*.epub` in Calibre + run `epubcheck` (if installed) → zero errors.
+- Full live run: `daily-epub generate` → file appears in BookOrbit UI under the Daily EPUB library only → browse BookOrbit OPDS from KOReader (Kindle/Palma), download, read; X4: CrossPoint OPDS → both the X4 EPUB (via BookOrbit) and XTC (via `daily.hallada.net/opds/xtc.xml`).
+- Tap a rating link on the Kindle → confirmation page loads → `sqlite3 … 'select * from ratings'` shows the vote.
+- Watch `runs` for a week: cost per day, selection quality; tune `prefilter_keep`/prompts.
+
+## 6. Future ideas (explicitly out of v1 scope; don't constrain the design)
+
+Weekly "Sunday Edition" retrospective; LLM editorials/opinion columns on the day's themes; discussion summarization for 500+ comment threads; embedding-based personal ranker (fastembed + linfa) once ratings accumulate; weather/on-this-day front-page ear boxes; a puzzle page; per-section reading-time budgets; Miniflux starred-entry import as implicit positive signal; TTS audio edition; X/Twitter comments if API access ever becomes viable.
+
+## 7. Known limitations & notes
+
+- X/Twitter comments are omitted (no free API).
+- Lobsters linkage only works when the entry originated from a lobste.rs feed (no URL-search API).
+- Paywalled articles degrade to excerpt + link; they're penalized but not banned (social proof can still surface them).
+- The X4 can't follow rating links (no browser) — accepted; rating happens from KOReader devices.
+- DeepSeek exact model id and `epub-to-xtc-converter` CLI flags must be confirmed against current docs during implementation (both noted inline).
+- Pricing basis (Aug 2026): DeepSeek V4 Flash ≈ $0.14/M input (cache-miss), $0.0028/M cached input, $0.28/M output — steady-state ≈ $0.05–0.30/day, hard-capped by `max_daily_usd`.
diff --git a/migrations/0001_init.sql b/migrations/0001_init.sql
new file mode 100644
index 0000000..11f90d1
--- /dev/null
+++ b/migrations/0001_init.sql
@@ -0,0 +1,141 @@
+-- The Daily EPUB — initial schema (spec §3.13).
+-- All timestamps are stored as RFC3339 UTC strings (implementation notes §2).
+
+-- Raw Miniflux entries, upserted by miniflux entry id (§3.1).
+CREATE TABLE IF NOT EXISTS entries (
+    id            INTEGER PRIMARY KEY, -- miniflux entry id
+    feed_id       INTEGER NOT NULL,
+    feed_title    TEXT,
+    category      TEXT,
+    title         TEXT,
+    url           TEXT,
+    canonical_url TEXT,
+    author        TEXT,
+    published_at  TEXT,
+    comments_url  TEXT,
+    raw_content   TEXT,
+    fetched_at    TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_entries_published_at ON entries (published_at);
+CREATE INDEX IF NOT EXISTS idx_entries_feed_id ON entries (feed_id);
+CREATE INDEX IF NOT EXISTS idx_entries_canonical_url ON entries (canonical_url);
+
+-- Deduped article clusters (§3.2). One row per canonical url.
+CREATE TABLE IF NOT EXISTS articles (
+    id            INTEGER PRIMARY KEY AUTOINCREMENT,
+    canonical_url TEXT NOT NULL UNIQUE,
+    title         TEXT,
+    best_entry_id INTEGER REFERENCES entries (id),
+    content_html  TEXT,
+    word_count    INTEGER NOT NULL DEFAULT 0,
+    excerpt_only  BOOLEAN NOT NULL DEFAULT 0,
+    image_count   INTEGER NOT NULL DEFAULT 0,
+    sources_json  TEXT NOT NULL DEFAULT '[]',
+    first_seen    TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_articles_first_seen ON articles (first_seen);
+CREATE INDEX IF NOT EXISTS idx_articles_best_entry_id ON articles (best_entry_id);
+
+-- Social proof cache (§3.4). Best-effort; refreshed by `backfill-social`.
+CREATE TABLE IF NOT EXISTS social (
+    article_id   INTEGER NOT NULL REFERENCES articles (id) ON DELETE CASCADE,
+    source       TEXT NOT NULL CHECK (source IN ('hn', 'lobsters', 'reddit', 'x')),
+    item_id      TEXT,
+    score        INTEGER NOT NULL DEFAULT 0,
+    num_comments INTEGER NOT NULL DEFAULT 0,
+    item_url     TEXT,
+    fetched_at   TEXT NOT NULL,
+    PRIMARY KEY (article_id, source)
+);
+
+CREATE INDEX IF NOT EXISTS idx_social_fetched_at ON social (fetched_at);
+
+-- Per-run scoring output (§3.5, §3.6).
+CREATE TABLE IF NOT EXISTS scores (
+    article_id      INTEGER NOT NULL REFERENCES articles (id) ON DELETE CASCADE,
+    run_date        TEXT NOT NULL,
+    prefilter_score REAL,
+    llm_score       REAL,
+    llm_category    TEXT,
+    rationale       TEXT,
+    PRIMARY KEY (article_id, run_date)
+);
+
+CREATE INDEX IF NOT EXISTS idx_scores_run_date ON scores (run_date);
+CREATE INDEX IF NOT EXISTS idx_scores_llm_score ON scores (llm_score);
+
+-- One published issue per date (§3.10, §3.11).
+CREATE TABLE IF NOT EXISTS issues (
+    date            TEXT PRIMARY KEY,
+    issue_number    INTEGER NOT NULL,
+    generated_at    TEXT NOT NULL,
+    epub_path       TEXT,
+    x4_path         TEXT,
+    xtc_path        TEXT,
+    front_page_html TEXT,
+    report_json     TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_issues_generated_at ON issues (generated_at);
+
+-- The lineup: which articles landed in which issue/section (§3.6 stage B).
+CREATE TABLE IF NOT EXISTS issue_articles (
+    issue_date TEXT NOT NULL REFERENCES issues (date) ON DELETE CASCADE,
+    article_id INTEGER NOT NULL REFERENCES articles (id) ON DELETE CASCADE,
+    section    TEXT NOT NULL,
+    position   INTEGER NOT NULL DEFAULT 0,
+    is_lead    BOOLEAN NOT NULL DEFAULT 0,
+    summary    TEXT,
+    PRIMARY KEY (issue_date, article_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_issue_articles_article_id ON issue_articles (article_id);
+CREATE INDEX IF NOT EXISTS idx_issue_articles_section ON issue_articles (issue_date, section, position);
+
+-- 👍/👎 feedback collected by `serve` (§3.9).
+CREATE TABLE IF NOT EXISTS ratings (
+    issue_date TEXT NOT NULL,
+    article_id INTEGER NOT NULL,
+    vote       INTEGER NOT NULL CHECK (vote IN (-1, 1)),
+    rated_at   TEXT NOT NULL,
+    PRIMARY KEY (issue_date, article_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_ratings_rated_at ON ratings (rated_at);
+CREATE INDEX IF NOT EXISTS idx_ratings_article_id ON ratings (article_id);
+
+-- Beta-smoothed per-feed upvote rate used by the pre-filter (§3.9).
+CREATE TABLE IF NOT EXISTS feed_priors (
+    feed_id   INTEGER PRIMARY KEY,
+    upvotes   INTEGER NOT NULL DEFAULT 0,
+    downvotes INTEGER NOT NULL DEFAULT 0,
+    included  INTEGER NOT NULL DEFAULT 0
+);
+
+-- One row per `generate` invocation; token/cost accounting (§3.6 guardrail).
+CREATE TABLE IF NOT EXISTS runs (
+    id              INTEGER PRIMARY KEY AUTOINCREMENT,
+    date            TEXT NOT NULL,
+    started_at      TEXT NOT NULL,
+    finished_at     TEXT,
+    entries_fetched INTEGER NOT NULL DEFAULT 0,
+    candidates      INTEGER NOT NULL DEFAULT 0,
+    selected        INTEGER NOT NULL DEFAULT 0,
+    input_tokens    INTEGER NOT NULL DEFAULT 0,
+    cached_tokens   INTEGER NOT NULL DEFAULT 0,
+    output_tokens   INTEGER NOT NULL DEFAULT 0,
+    cost_usd        REAL NOT NULL DEFAULT 0.0,
+    status          TEXT NOT NULL DEFAULT 'running',
+    error           TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_runs_date ON runs (date);
+CREATE INDEX IF NOT EXISTS idx_runs_started_at ON runs (started_at);
+
+-- Misc singletons: ingest watermark, taste profile, profile version (§3.1, §3.6).
+CREATE TABLE IF NOT EXISTS kv (
+    key   TEXT PRIMARY KEY,
+    value TEXT NOT NULL
+);
diff --git a/src/auth.rs b/src/auth.rs
new file mode 100644
index 0000000..7bf5f26
--- /dev/null
+++ b/src/auth.rs
@@ -0,0 +1,141 @@
+//! Rating-link signing — the single source of truth for the HMAC token (spec §3.9).
+//!
+//! The EPUB article footer ([`crate::epub::build`]) mints the links and the rating
+//! endpoint ([`crate::server`]) verifies them, so the formula must be identical on
+//! both sides. It lives here and nowhere else:
+//!
+//! ```text
+//! message = "{issue_date}/{article_id}/{up|down}"
+//! token   = hex(hmac_sha256(secret, message))[..16]
+//! link    = {public_url}/r/{issue_date}/{article_id}/{vote}?t={token}
+//! ```
+//!
+//! Pinned test vector, asserted from three places (here, `epub::build`,
+//! `tests/m7_server.rs`): `secret = "test-secret"`, date `2026-08-15`,
+//! article `42`, `up` → `3b314cf7e6d8f50f`.
+
+use hmac::{Hmac, KeyInit, Mac};
+use jiff::civil::Date;
+use sha2::Sha256;
+
+use crate::types::{ArticleId, Vote};
+
+/// Characters of the hex HMAC kept in rating links (§3.9).
+pub const TOKEN_LEN: usize = 16;
+
+/// The exact signed string: `{issue_date}/{article_id}/{up|down}` (§3.9).
+pub fn rating_message(issue_date: Date, article_id: ArticleId, vote: Vote) -> String {
+    format!("{issue_date}/{article_id}/{}", vote.as_str())
+}
+
+/// `hex(hmac_sha256(secret, "{issue_date}/{article_id}/{vote}"))[..16]` (§3.9).
+pub fn rating_token(secret: &str, issue_date: Date, article_id: ArticleId, vote: Vote) -> String {
+    // `Hmac` derives a fixed-size key from any input length, so this never fails.
+    let mut mac = <Hmac<Sha256> as KeyInit>::new_from_slice(secret.as_bytes())
+        .expect("HMAC accepts keys of any length");
+    mac.update(rating_message(issue_date, article_id, vote).as_bytes());
+    let digest = hex::encode(mac.finalize().into_bytes());
+    digest[..TOKEN_LEN].to_string()
+}
+
+/// Constant-time comparison of a supplied token against the expected one (§3.9).
+pub fn verify_token(
+    secret: &str,
+    issue_date: Date,
+    article_id: ArticleId,
+    vote: Vote,
+    token: &str,
+) -> bool {
+    constant_time_eq(
+        rating_token(secret, issue_date, article_id, vote).as_bytes(),
+        token.as_bytes(),
+    )
+}
+
+/// Length-independent, data-independent byte comparison.
+///
+/// A tiny local implementation so the crate does not need `subtle` directly;
+/// `black_box` keeps the optimizer from short-circuiting the accumulate.
+pub fn constant_time_eq(a: &[u8], b: &[u8]) -> bool {
+    let mut diff = (a.len() ^ b.len()) as u8;
+    for i in 0..a.len().max(b.len()) {
+        let x = a.get(i).copied().unwrap_or(0);
+        let y = b.get(i).copied().unwrap_or(0);
+        diff |= x ^ y;
+    }
+    std::hint::black_box(diff) == 0
+}
+
+/// Full rating URL embedded in an article footer:
+/// `{public_url}/r/{date}/{article_id}/{up|down}?t={token}` (§3.9).
+pub fn rating_url(
+    public_url: &str,
+    secret: &str,
+    issue_date: Date,
+    article_id: ArticleId,
+    vote: Vote,
+) -> String {
+    let token = rating_token(secret, issue_date, article_id, vote);
+    format!(
+        "{}/r/{issue_date}/{article_id}/{}?t={token}",
+        public_url.trim_end_matches('/'),
+        vote.as_str()
+    )
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn date() -> Date {
+        "2026-08-15".parse().expect("date")
+    }
+
+    #[test]
+    fn token_matches_the_shared_vector() {
+        assert_eq!(rating_message(date(), 42, Vote::Up), "2026-08-15/42/up");
+        assert_eq!(
+            rating_token("test-secret", date(), 42, Vote::Up),
+            "3b314cf7e6d8f50f"
+        );
+        assert_eq!(rating_token("test-secret", date(), 42, Vote::Up).len(), 16);
+    }
+
+    #[test]
+    fn tokens_are_per_article_and_per_vote() {
+        let up = rating_token("s", date(), 42, Vote::Up);
+        assert_ne!(up, rating_token("s", date(), 42, Vote::Down));
+        assert_ne!(up, rating_token("s", date(), 43, Vote::Up));
+        assert_ne!(up, rating_token("other", date(), 42, Vote::Up));
+        let tomorrow: Date = "2026-08-16".parse().unwrap();
+        assert_ne!(up, rating_token("s", tomorrow, 42, Vote::Up));
+    }
+
+    #[test]
+    fn verification_is_exact() {
+        assert!(verify_token(
+            "s",
+            date(),
+            42,
+            Vote::Up,
+            &rating_token("s", date(), 42, Vote::Up)
+        ));
+        assert!(!verify_token("s", date(), 42, Vote::Up, "deadbeefdeadbeef"));
+        assert!(!verify_token("s", date(), 42, Vote::Up, ""));
+        assert!(!verify_token("s", date(), 42, Vote::Up, "short"));
+    }
+
+    #[test]
+    fn url_shape_matches_the_spec() {
+        assert_eq!(
+            rating_url(
+                "https://daily.hallada.net/",
+                "test-secret",
+                date(),
+                42,
+                Vote::Up
+            ),
+            "https://daily.hallada.net/r/2026-08-15/42/up?t=3b314cf7e6d8f50f"
+        );
+    }
+}
diff --git a/src/comments.rs b/src/comments.rs
new file mode 100644
index 0000000..8093e9e
--- /dev/null
+++ b/src/comments.rs
@@ -0,0 +1,832 @@
+//! Comment chapters: fetch trees for selected articles and render them (spec §3.7).
+//!
+//! Heuristic only, no LLM. Rendered as nested border-left indentation that reads
+//! well on e-ink (no color). Every fetch is best-effort: a platform that errors
+//! out is simply left out of the chapter (notes §3).
+
+use std::collections::HashSet;
+
+use futures::StreamExt;
+use serde_json::Value;
+
+use crate::epub::images::{text_escape, to_xhtml};
+use crate::types::{Comment, CommentThread, Discussion, Pick, SocialSource};
+
+/// Top-level threads kept per source (§3.7).
+pub const MAX_TOP_LEVEL: usize = 8;
+/// Maximum nesting depth rendered: depths 0, 1 and 2 (§3.7).
+pub const MAX_DEPTH: usize = 3;
+/// Maximum children rendered per node (§3.7).
+pub const MAX_CHILDREN: usize = 4;
+/// Per-comment character cap before ellipsizing (§3.7).
+pub const MAX_COMMENT_CHARS: usize = 1200;
+/// Whole-chapter word cap (§3.7).
+pub const MAX_CHAPTER_WORDS: usize = 4000;
+/// Concurrent discussion fetches.
+pub const CONCURRENCY: usize = 4;
+
+/// Platform order inside a discussion chapter: HN → Lobsters → Reddit (§3.7).
+pub const SOURCE_ORDER: &[SocialSource] = &[
+    SocialSource::Hn,
+    SocialSource::Lobsters,
+    SocialSource::Reddit,
+];
+
+// ---------------------------------------------------------------------------
+// Fetching
+// ---------------------------------------------------------------------------
+
+/// `https://hn.algolia.com/api/v1/items/{objectID}` (§3.7).
+pub fn hn_items_url(item_id: &str) -> String {
+    format!("https://hn.algolia.com/api/v1/items/{item_id}")
+}
+
+/// `https://lobste.rs/s/{id}.json` (§3.7).
+pub fn lobsters_url(item_id: &str) -> String {
+    format!("https://lobste.rs/s/{item_id}.json")
+}
+
+/// `https://www.reddit.com{permalink}.json?limit=100&depth=3&sort=top` (§3.7).
+pub fn reddit_url(permalink_or_url: &str) -> String {
+    let base = permalink_or_url.trim_end_matches('/');
+    let base = if base.starts_with("http://") || base.starts_with("https://") {
+        base.to_string()
+    } else if base.starts_with('/') {
+        format!("https://www.reddit.com{base}")
+    } else {
+        format!("https://www.reddit.com/{base}")
+    };
+    let base = base.trim_end_matches(".json").to_string();
+    format!("{base}.json?limit=100&depth=3&sort=top")
+}
+
+async fn get_json(http: &reqwest::Client, url: &str) -> Option<Value> {
+    let resp = http
+        .get(url)
+        .send()
+        .await
+        .map_err(|e| tracing::debug!(url, "comment fetch failed: {e}"))
+        .ok()?;
+    if !resp.status().is_success() {
+        tracing::debug!(url, status = %resp.status(), "comment fetch rejected");
+        return None;
+    }
+    resp.json::<Value>()
+        .await
+        .map_err(|e| tracing::debug!(url, "comment payload was not json: {e}"))
+        .ok()
+}
+
+/// Fetch and assemble the discussion for one selected article, ordered
+/// HN → Lobsters → Reddit (§3.7). Best-effort: returns `None` on failure.
+pub async fn fetch_discussion(http: &reqwest::Client, pick: &Pick) -> Option<Discussion> {
+    let mut threads: Vec<CommentThread> = Vec::new();
+    for source in SOURCE_ORDER {
+        let Some(social) = pick.article.social.iter().find(|s| s.source == *source) else {
+            continue;
+        };
+        let thread = match source {
+            SocialSource::Hn => match social.item_id.as_deref() {
+                Some(id) => get_json(http, &hn_items_url(id))
+                    .await
+                    .and_then(|v| parse_hn(&v)),
+                None => None,
+            },
+            SocialSource::Lobsters => match social.item_id.as_deref() {
+                Some(id) => get_json(http, &lobsters_url(id))
+                    .await
+                    .and_then(|v| parse_lobsters(&v)),
+                None => None,
+            },
+            SocialSource::Reddit => {
+                let target = social
+                    .item_url
+                    .as_deref()
+                    .or(social.item_id.as_deref())
+                    .map(reddit_url);
+                match target {
+                    Some(url) => get_json(http, &url)
+                        .await
+                        .and_then(|v| parse_reddit(&v, "")),
+                    None => None,
+                }
+            }
+            SocialSource::X => None,
+        };
+        match thread {
+            Some(mut t) => {
+                t.comments = truncate(t.comments);
+                if !t.comments.is_empty() {
+                    threads.push(t);
+                }
+            }
+            None => tracing::debug!(
+                source = %source,
+                article = pick.article.id,
+                "no comment tree for this source"
+            ),
+        }
+    }
+    if threads.is_empty() {
+        return None;
+    }
+    enforce_chapter_budget(&mut threads);
+    Some(Discussion {
+        article_id: pick.article.id,
+        chapter_id: format!("disc-{}", pick.article.best_entry_id),
+        threads,
+    })
+}
+
+/// Fetch discussions for every pick in parallel, filling [`Pick::discussion`] (§3.7).
+pub async fn fetch_all(http: &reqwest::Client, picks: &mut [Pick]) -> usize {
+    let fetched: Vec<Option<Discussion>> = futures::stream::iter(picks.iter().map(|pick| {
+        let http = http.clone();
+        async move { fetch_discussion(&http, pick).await }
+    }))
+    .buffered(CONCURRENCY)
+    .collect()
+    .await;
+
+    let mut count = 0;
+    for (pick, discussion) in picks.iter_mut().zip(fetched) {
+        if discussion.is_some() {
+            count += 1;
+        }
+        pick.discussion = discussion;
+    }
+    tracing::info!(count, of = picks.len(), "fetched discussion chapters");
+    count
+}
+
+// ---------------------------------------------------------------------------
+// Parsing (pure — fixtures cover these, no network in tests)
+// ---------------------------------------------------------------------------
+
+/// Parse the Algolia `items/{id}` tree (§3.7).
+pub fn parse_hn(v: &Value) -> Option<CommentThread> {
+    let id = v.get("id")?.as_i64()?;
+    let mut comments = Vec::new();
+    let mut total = 0i64;
+    for child in v.get("children")?.as_array()?.iter() {
+        if let Some(c) = hn_node(child, 0, &mut total) {
+            comments.push(c);
+        }
+    }
+    sort_by_points(&mut comments);
+    Some(CommentThread {
+        source: SocialSource::Hn,
+        item_url: format!("https://news.ycombinator.com/item?id={id}"),
+        total_comments: total,
+        comments,
+    })
+}
+
+fn hn_node(v: &Value, depth: usize, total: &mut i64) -> Option<Comment> {
+    let text = v.get("text").and_then(|t| t.as_str()).unwrap_or("");
+    let author = v.get("author").and_then(|a| a.as_str()).unwrap_or("");
+    let mut children = Vec::new();
+    if let Some(kids) = v.get("children").and_then(|c| c.as_array()) {
+        for kid in kids {
+            if let Some(c) = hn_node(kid, depth + 1, total) {
+                children.push(c);
+            }
+        }
+    }
+    if text.is_empty() || author.is_empty() {
+        // Dead/deleted node: keep its (live) replies by lifting them up.
+        return children.into_iter().next();
+    }
+    *total += 1;
+    sort_by_points(&mut children);
+    Some(Comment {
+        author: author.to_string(),
+        points: v.get("points").and_then(|p| p.as_i64()),
+        text_html: sanitize_comment(text),
+        depth,
+        children,
+    })
+}
+
+/// Parse `https://lobste.rs/s/{id}.json` — a flat list keyed by `indent_level` (§3.7).
+pub fn parse_lobsters(v: &Value) -> Option<CommentThread> {
+    let short_id = v.get("short_id").and_then(|s| s.as_str()).unwrap_or("");
+    let item_url = v
+        .get("short_id_url")
+        .and_then(|s| s.as_str())
+        .map(str::to_string)
+        .unwrap_or_else(|| format!("https://lobste.rs/s/{short_id}"));
+    let raw = v.get("comments").and_then(|c| c.as_array())?;
+
+    // Rebuild the tree from indent_level (1 = top level).
+    let mut roots: Vec<Comment> = Vec::new();
+    // Path of indices into the tree for the current branch.
+    let mut path: Vec<usize> = Vec::new();
+    let mut total = 0i64;
+    for item in raw {
+        let text = item
+            .get("comment")
+            .and_then(|c| c.as_str())
+            .or_else(|| item.get("comment_plain").and_then(|c| c.as_str()))
+            .unwrap_or("");
+        if text.is_empty() {
+            continue;
+        }
+        let author = match item.get("commenting_user") {
+            Some(Value::String(s)) => s.clone(),
+            Some(Value::Object(o)) => o
+                .get("username")
+                .and_then(|u| u.as_str())
+                .unwrap_or("someone")
+                .to_string(),
+            _ => "someone".to_string(),
+        };
+        let indent = item
+            .get("indent_level")
+            .and_then(|i| i.as_i64())
+            .unwrap_or(1)
+            .max(1) as usize;
+        let depth = indent - 1;
+        total += 1;
+        let comment = Comment {
+            author,
+            points: item.get("score").and_then(|s| s.as_i64()),
+            text_html: sanitize_comment(text),
+            depth,
+            children: Vec::new(),
+        };
+        path.truncate(depth);
+        if depth == 0 || path.len() < depth {
+            path.clear();
+            roots.push(comment);
+            path.push(roots.len() - 1);
+        } else {
+            let mut node = &mut roots[path[0]];
+            for idx in &path[1..] {
+                node = &mut node.children[*idx];
+            }
+            node.children.push(comment);
+            let child_idx = node.children.len() - 1;
+            path.push(child_idx);
+        }
+    }
+    sort_by_points(&mut roots);
+    let total_comments = v
+        .get("comment_count")
+        .and_then(|c| c.as_i64())
+        .unwrap_or(total);
+    Some(CommentThread {
+        source: SocialSource::Lobsters,
+        item_url,
+        total_comments,
+        comments: roots,
+    })
+}
+
+/// Parse `{permalink}.json` — `[post listing, comment listing]` (§3.7).
+pub fn parse_reddit(v: &Value, fallback_url: &str) -> Option<CommentThread> {
+    let listings = v.as_array()?;
+    let post = listings.first();
+    let permalink = post
+        .and_then(|l| l.pointer("/data/children/0/data/permalink"))
+        .and_then(|p| p.as_str())
+        .map(|p| format!("https://www.reddit.com{p}"))
+        .unwrap_or_else(|| fallback_url.to_string());
+    let declared = post
+        .and_then(|l| l.pointer("/data/children/0/data/num_comments"))
+        .and_then(|n| n.as_i64());
+
+    let children = listings
+        .get(1)
+        .and_then(|l| l.pointer("/data/children"))
+        .and_then(|c| c.as_array())?;
+
+    let mut comments = Vec::new();
+    let mut total = 0i64;
+    for child in children {
+        if let Some(c) = reddit_node(child, 0, &mut total) {
+            comments.push(c);
+        }
+    }
+    sort_by_points(&mut comments);
+    Some(CommentThread {
+        source: SocialSource::Reddit,
+        item_url: permalink,
+        total_comments: declared.unwrap_or(total),
+        comments,
+    })
+}
+
+fn reddit_node(child: &Value, depth: usize, total: &mut i64) -> Option<Comment> {
+    if child.get("kind").and_then(|k| k.as_str()) != Some("t1") {
+        return None; // "more" placeholders and the post itself
+    }
+    let data = child.get("data")?;
+    let author = data.get("author").and_then(|a| a.as_str()).unwrap_or("");
+    let body = data
+        .get("body_html")
+        .and_then(|b| b.as_str())
+        .map(unescape_entities)
+        .or_else(|| {
+            data.get("body")
+                .and_then(|b| b.as_str())
+                .map(str::to_string)
+        })
+        .unwrap_or_default();
+    if author.is_empty() || author == "[deleted]" || body.is_empty() {
+        return None;
+    }
+    *total += 1;
+    let mut children = Vec::new();
+    if let Some(replies) = data
+        .get("replies")
+        .and_then(|r| r.pointer("/data/children"))
+        && let Some(list) = replies.as_array()
+    {
+        for reply in list {
+            if let Some(c) = reddit_node(reply, depth + 1, total) {
+                children.push(c);
+            }
+        }
+    }
+    sort_by_points(&mut children);
+    Some(Comment {
+        author: author.to_string(),
+        points: data.get("score").and_then(|s| s.as_i64()),
+        text_html: sanitize_comment(&body),
+        depth,
+        children,
+    })
+}
+
+fn sort_by_points(comments: &mut [Comment]) {
+    // Stable: platform ordering survives when scores are missing or equal.
+    comments.sort_by_key(|c| std::cmp::Reverse(c.points.unwrap_or(0)));
+}
+
+// ---------------------------------------------------------------------------
+// Sanitization and pruning
+// ---------------------------------------------------------------------------
+
+/// Sanitize a comment body down to the small tag set the EPUB CSS styles (§3.7).
+pub fn sanitize_comment(html: &str) -> String {
+    let tags: HashSet<&str> = [
+        "p",
+        "a",
+        "em",
+        "i",
+        "strong",
+        "b",
+        "code",
+        "pre",
+        "blockquote",
+        "ul",
+        "ol",
+        "li",
+        "br",
+        "del",
+        "sup",
+        "sub",
+    ]
+    .into_iter()
+    .collect();
+    let cleaned = ammonia::Builder::new()
+        .tags(tags)
+        .link_rel(None)
+        .clean(html)
+        .to_string();
+    let trimmed = cleaned.trim();
+    if trimmed.is_empty() {
+        return String::new();
+    }
+    if trimmed.starts_with('<') {
+        trimmed.to_string()
+    } else {
+        // HN comment bodies start with a bare text run.
+        format!("<p>{trimmed}</p>")
+    }
+}
+
+/// Minimal HTML entity decode — Reddit double-escapes `body_html`.
+pub fn unescape_entities(s: &str) -> String {
+    s.replace("&lt;", "<")
+        .replace("&gt;", ">")
+        .replace("&quot;", "\"")
+        .replace("&#39;", "'")
+        .replace("&#x200B;", "")
+        .replace("&nbsp;", " ")
+        .replace("&amp;", "&")
+}
+
+/// Plain text of a markup fragment, used for length and word budgeting.
+pub fn strip_tags(html: &str) -> String {
+    let mut out = String::with_capacity(html.len());
+    let mut in_tag = false;
+    for c in html.chars() {
+        match c {
+            '<' => in_tag = true,
+            '>' => in_tag = false,
+            _ if !in_tag => out.push(c),
+            _ => {}
+        }
+    }
+    unescape_entities(&out)
+        .split_whitespace()
+        .collect::<Vec<_>>()
+        .join(" ")
+}
+
+/// Ellipsize a comment body to `max_chars` of visible text (§3.7).
+pub fn ellipsize_html(html: &str, max_chars: usize) -> String {
+    let text = strip_tags(html);
+    if text.chars().count() <= max_chars {
+        return html.to_string();
+    }
+    let mut kept: String = text.chars().take(max_chars).collect();
+    // Prefer cutting on a word boundary.
+    if let Some(idx) = kept.rfind(' ')
+        && idx > max_chars * 3 / 4
+    {
+        kept.truncate(idx);
+    }
+    format!("<p>{}…</p>", text_escape(kept.trim_end()))
+}
+
+fn word_count(html: &str) -> usize {
+    strip_tags(html).split_whitespace().count()
+}
+
+/// Truncate a tree to the §3.7 limits: top threads by score, depth, children,
+/// per-comment length and whole-chapter word budget.
+pub fn truncate(comments: Vec<Comment>) -> Vec<Comment> {
+    let mut roots: Vec<Comment> = comments;
+    sort_by_points(&mut roots);
+    roots.truncate(MAX_TOP_LEVEL);
+    let mut pruned: Vec<Comment> = roots
+        .into_iter()
+        .map(|c| prune_node(c, 0))
+        .filter(|c| !c.text_html.is_empty())
+        .collect();
+    let mut budget = MAX_CHAPTER_WORDS;
+    trim_to_budget(&mut pruned, &mut budget);
+    pruned
+}
+
+fn prune_node(mut comment: Comment, depth: usize) -> Comment {
+    comment.depth = depth;
+    comment.text_html = ellipsize_html(&comment.text_html, MAX_COMMENT_CHARS);
+    if depth + 1 >= MAX_DEPTH {
+        comment.children = Vec::new();
+        return comment;
+    }
+    let mut children = std::mem::take(&mut comment.children);
+    sort_by_points(&mut children);
+    children.truncate(MAX_CHILDREN);
+    comment.children = children
+        .into_iter()
+        .map(|c| prune_node(c, depth + 1))
+        .filter(|c| !c.text_html.is_empty())
+        .collect();
+    comment
+}
+
+/// Drop comments (depth-first, in render order) once the word budget runs out.
+fn trim_to_budget(comments: &mut Vec<Comment>, budget: &mut usize) {
+    let mut kept = Vec::with_capacity(comments.len());
+    for mut comment in std::mem::take(comments) {
+        let cost = word_count(&comment.text_html);
+        if cost > *budget {
+            break;
+        }
+        *budget -= cost;
+        trim_to_budget(&mut comment.children, budget);
+        kept.push(comment);
+    }
+    *comments = kept;
+}
+
+/// Apply the whole-chapter word cap across every source in the chapter (§3.7).
+pub fn enforce_chapter_budget(threads: &mut Vec<CommentThread>) {
+    let mut budget = MAX_CHAPTER_WORDS;
+    for thread in threads.iter_mut() {
+        trim_to_budget(&mut thread.comments, &mut budget);
+    }
+    threads.retain(|t| !t.comments.is_empty());
+}
+
+// ---------------------------------------------------------------------------
+// Rendering
+// ---------------------------------------------------------------------------
+
+/// Chapter title: "💬 Discussion: {title} ({N} comments on {source})" (§3.7).
+pub fn chapter_title(article_title: &str, discussion: &Discussion) -> String {
+    let sources: Vec<&str> = discussion
+        .threads
+        .iter()
+        .map(|t| t.source.display_name())
+        .collect();
+    let sources = if sources.is_empty() {
+        "the web".to_string()
+    } else {
+        sources.join(", ")
+    };
+    let n = discussion.total_comments();
+    let noun = if n == 1 { "comment" } else { "comments" };
+    format!("\u{1f4ac} Discussion: {article_title} ({n} {noun} on {sources})")
+}
+
+/// Render a discussion to sanitized XHTML for the EPUB (§3.7).
+pub fn render_xhtml(discussion: &Discussion, article_title: &str) -> String {
+    let mut out = String::new();
+    for thread in &discussion.threads {
+        out.push_str(&format!(
+            "      <h2 class=\"discussion-source\">{}</h2>\n",
+            text_escape(&thread_heading(thread))
+        ));
+        out.push_str(&format!(
+            "      <p class=\"discussion-link\"><a href=\"{}\">View the thread \u{2197}</a></p>\n",
+            text_escape(&thread.item_url)
+        ));
+        for comment in &thread.comments {
+            render_comment(comment, 3, 0, &mut out);
+        }
+    }
+    if out.is_empty() {
+        out.push_str(&format!(
+            "      <p>No comments were available for {}.</p>\n",
+            text_escape(article_title)
+        ));
+    }
+    out
+}
+
+fn thread_heading(thread: &CommentThread) -> String {
+    let noun = if thread.total_comments == 1 {
+        "comment"
+    } else {
+        "comments"
+    };
+    format!(
+        "{} \u{00b7} {} {}",
+        thread.source.display_name(),
+        thread.total_comments,
+        noun
+    )
+}
+
+/// Tag a comment's paragraphs so the X4 can style them without a descendant
+/// selector (§3.10). [`sanitize_comment`] allows no attributes on `p`, so every
+/// paragraph in a comment body is exactly `<p>`.
+fn class_comment_paragraphs(html: &str) -> String {
+    html.replace("<p>", "<p class=\"comment-line\">")
+}
+
+/// `indent` is cosmetic whitespace; `depth` is the reply nesting level, 0 for a
+/// thread's top-level comments.
+fn render_comment(comment: &Comment, indent: usize, depth: usize, out: &mut String) {
+    let pad = " ".repeat(indent * 2);
+    // Nesting is carried as a class rather than left to a descendant selector:
+    // the X4's CSS engine only understands `tag`, `.class` and `tag.class`
+    // (§3.10), so `blockquote.comment blockquote.comment` never matches there.
+    let class = if depth > 0 {
+        "comment reply"
+    } else {
+        "comment"
+    };
+    out.push_str(&format!("{pad}<blockquote class=\"{class}\">\n"));
+    let points = match comment.points {
+        Some(p) => format!(" \u{00b7} {p} points"),
+        None => String::new(),
+    };
+    out.push_str(&format!(
+        "{pad}  <p class=\"comment-meta\">{}{}</p>\n",
+        text_escape(&comment.author),
+        text_escape(&points)
+    ));
+    out.push_str(&format!(
+        "{pad}  <div class=\"comment-body\">{}</div>\n",
+        class_comment_paragraphs(&to_xhtml(&comment.text_html))
+    ));
+    for child in &comment.children {
+        render_comment(child, indent + 1, depth + 1, out);
+    }
+    out.push_str(&format!("{pad}</blockquote>\n"));
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn leaf(author: &str, points: i64, text: &str) -> Comment {
+        Comment {
+            author: author.into(),
+            points: Some(points),
+            text_html: format!("<p>{text}</p>"),
+            depth: 0,
+            children: Vec::new(),
+        }
+    }
+
+    fn fixture(name: &str) -> Value {
+        let path = std::path::Path::new(env!("CARGO_MANIFEST_DIR"))
+            .join("tests/fixtures")
+            .join(name);
+        let raw = std::fs::read_to_string(&path).expect("fixture must exist");
+        serde_json::from_str(&raw).expect("fixture must be json")
+    }
+
+    #[test]
+    fn parses_the_hn_item_tree() {
+        let thread = parse_hn(&fixture("hn_item.json")).expect("hn tree");
+        assert_eq!(thread.source, SocialSource::Hn);
+        assert_eq!(
+            thread.item_url,
+            "https://news.ycombinator.com/item?id=40100000"
+        );
+        assert_eq!(thread.total_comments, 4);
+        // Highest-scoring root first.
+        assert_eq!(thread.comments[0].author, "alice");
+        assert_eq!(thread.comments[0].children.len(), 1);
+        assert_eq!(thread.comments[0].children[0].author, "bob");
+        assert!(thread.comments[0].text_html.contains("<p>"));
+        // The deleted node is dropped but its live reply survives.
+        assert!(thread.comments.iter().all(|c| !c.author.is_empty()));
+        assert!(thread.comments.iter().any(|c| c.author == "dana"));
+    }
+
+    #[test]
+    fn parses_lobsters_indent_levels_into_a_tree() {
+        let thread = parse_lobsters(&fixture("lobsters_story.json")).expect("lobsters tree");
+        assert_eq!(thread.source, SocialSource::Lobsters);
+        assert_eq!(thread.item_url, "https://lobste.rs/s/abcdef");
+        assert_eq!(thread.total_comments, 4);
+        assert_eq!(thread.comments.len(), 2);
+        let top = &thread.comments[0];
+        assert_eq!(top.author, "pushcx");
+        assert_eq!(top.children.len(), 1);
+        assert_eq!(top.children[0].children.len(), 1);
+        assert_eq!(top.children[0].children[0].author, "third");
+    }
+
+    #[test]
+    fn parses_reddit_listings_and_skips_more_stubs() {
+        let thread = parse_reddit(&fixture("reddit_comments.json"), "").expect("reddit tree");
+        assert_eq!(thread.source, SocialSource::Reddit);
+        assert_eq!(
+            thread.item_url,
+            "https://www.reddit.com/r/rust/comments/abc/title/"
+        );
+        assert_eq!(thread.total_comments, 87);
+        assert_eq!(thread.comments.len(), 2);
+        assert_eq!(thread.comments[0].author, "ferris");
+        assert_eq!(thread.comments[0].children.len(), 1);
+        // body_html arrives entity-escaped and must decode into real markup.
+        assert!(thread.comments[0].text_html.contains("<p>"));
+        assert!(thread.comments[0].text_html.contains("borrow checker"));
+        assert!(!thread.comments[0].text_html.contains("&lt;p&gt;"));
+        assert!(thread.comments.iter().all(|c| c.author != "[deleted]"));
+    }
+
+    #[test]
+    fn reddit_url_normalizes_permalinks() {
+        assert_eq!(
+            reddit_url("/r/rust/comments/abc/title/"),
+            "https://www.reddit.com/r/rust/comments/abc/title.json?limit=100&depth=3&sort=top"
+        );
+        assert_eq!(
+            reddit_url("https://www.reddit.com/r/rust/comments/abc/title"),
+            "https://www.reddit.com/r/rust/comments/abc/title.json?limit=100&depth=3&sort=top"
+        );
+    }
+
+    #[test]
+    fn sanitizer_strips_scripts_and_wraps_bare_text() {
+        let out = sanitize_comment("hello <script>alert(1)</script><b>world</b>");
+        assert!(out.starts_with("<p>"));
+        assert!(!out.contains("script"));
+        assert!(out.contains("<b>world</b>"));
+        assert_eq!(sanitize_comment("<p>kept</p>"), "<p>kept</p>");
+    }
+
+    #[test]
+    fn truncation_applies_every_spec_limit() {
+        let mut roots: Vec<Comment> = (0..12)
+            .map(|i| leaf(&format!("u{i}"), i as i64, "word ".repeat(10).trim()))
+            .collect();
+        // Give the top root six children, each with children of their own.
+        let mut deep = leaf("deep0", 100, "one");
+        for i in 0..6 {
+            let mut child = leaf(&format!("c{i}"), i as i64, "two");
+            child.children.push(leaf("grandchild", 1, "three"));
+            child.children[0].children.push(leaf("too-deep", 1, "four"));
+            deep.children.push(child);
+        }
+        roots.push(deep);
+
+        let out = truncate(roots);
+        assert_eq!(out.len(), MAX_TOP_LEVEL, "top-level threads capped");
+        assert_eq!(out[0].author, "deep0", "sorted by score, best first");
+        assert_eq!(out[0].children.len(), MAX_CHILDREN, "children capped");
+        assert_eq!(out[0].children[0].depth, 1);
+        assert_eq!(out[0].children[0].children.len(), 1);
+        assert_eq!(out[0].children[0].children[0].depth, 2);
+        assert!(
+            out[0].children[0].children[0].children.is_empty(),
+            "rendering stops at depth {MAX_DEPTH}"
+        );
+    }
+
+    #[test]
+    fn per_comment_text_is_ellipsized() {
+        let long = "lorem ipsum ".repeat(200);
+        let comment = leaf("verbose", 5, &long);
+        let out = truncate(vec![comment]);
+        let text = strip_tags(&out[0].text_html);
+        assert!(text.chars().count() <= MAX_COMMENT_CHARS + 1);
+        assert!(out[0].text_html.ends_with("…</p>"));
+        // Short comments are left untouched.
+        assert_eq!(ellipsize_html("<p>short</p>", 100), "<p>short</p>");
+    }
+
+    fn tree_words(comments: &[Comment]) -> usize {
+        comments
+            .iter()
+            .map(|c| word_count(&c.text_html) + tree_words(&c.children))
+            .sum()
+    }
+
+    fn tree_len(comments: &[Comment]) -> usize {
+        comments.iter().map(|c| 1 + tree_len(&c.children)).sum()
+    }
+
+    #[test]
+    fn chapter_word_budget_is_enforced() {
+        // Every comment ellipsizes to ~240 words, so a full 8×4×4 tree is far
+        // over the 4,000-word chapter budget.
+        let long = "word ".repeat(400);
+        let roots: Vec<Comment> = (0..MAX_TOP_LEVEL)
+            .map(|i| {
+                let mut root = leaf(&format!("u{i}"), 100 - i as i64, &long);
+                for j in 0..MAX_CHILDREN {
+                    let mut child = leaf(&format!("c{i}{j}"), 10, &long);
+                    child.children.push(leaf("grandchild", 1, &long));
+                    root.children.push(child);
+                }
+                root
+            })
+            .collect();
+        let full = tree_len(&roots);
+
+        let out = truncate(roots);
+        let total = tree_words(&out);
+        assert!(total <= MAX_CHAPTER_WORDS, "{total} words is over budget");
+        assert!(!out.is_empty());
+        assert!(
+            tree_len(&out) < full,
+            "comments past the budget are dropped"
+        );
+    }
+
+    #[test]
+    fn renders_nested_blockquotes_and_a_title() {
+        let mut root = leaf("alice", 42, "top level");
+        root.children.push(leaf("bob", 3, "reply"));
+        let discussion = Discussion {
+            article_id: 7,
+            chapter_id: "disc-1001".into(),
+            threads: vec![CommentThread {
+                source: SocialSource::Hn,
+                item_url: "https://news.ycombinator.com/item?id=1".into(),
+                total_comments: 210,
+                comments: vec![root],
+            }],
+        };
+        let xhtml = render_xhtml(&discussion, "A Title");
+        assert!(xhtml.contains("HN \u{00b7} 210 comments"));
+        assert!(xhtml.contains("alice \u{00b7} 42 points"));
+        // Top-level comments and replies are distinguishable by class alone, so
+        // the X4 needs no descendant selector to indent them (§3.10).
+        assert_eq!(xhtml.matches("<blockquote class=\"comment\">").count(), 1);
+        assert_eq!(
+            xhtml
+                .matches("<blockquote class=\"comment reply\">")
+                .count(),
+            1
+        );
+        assert_eq!(
+            xhtml.matches("</blockquote>").count(),
+            2,
+            "every blockquote is closed"
+        );
+        // Comment paragraphs carry their own class for the same reason.
+        assert!(
+            xhtml.contains("<p class=\"comment-line\">top level</p>"),
+            "{xhtml}"
+        );
+        assert!(!xhtml.contains("<p>"), "an unclassed paragraph survived");
+        assert_eq!(
+            chapter_title("A Title", &discussion),
+            "\u{1f4ac} Discussion: A Title (210 comments on HN)"
+        );
+    }
+}
diff --git a/src/config.rs b/src/config.rs
new file mode 100644
index 0000000..a750275
--- /dev/null
+++ b/src/config.rs
@@ -0,0 +1,471 @@
+//! Typed configuration (spec §3.14).
+//!
+//! Load order, later wins: built-in defaults ← `config.toml` (path from `--config`,
+//! else `./config.toml` if present) ← `DAILY_EPUB_*` environment variables, where
+//! nesting is expressed with a double underscore (`DAILY_EPUB_MINIFLUX__API_KEY`).
+
+use std::path::{Path, PathBuf};
+
+use figment::Figment;
+use figment::providers::{Env, Format, Serialized, Toml};
+use serde::{Deserialize, Serialize};
+
+/// Environment-variable prefix for every override (§3.14).
+pub const ENV_PREFIX: &str = "DAILY_EPUB_";
+/// Nesting separator inside env var names.
+pub const ENV_SPLIT: &str = "__";
+/// Default config file looked up when `--config` is not given.
+pub const DEFAULT_CONFIG_FILE: &str = "config.toml";
+
+#[derive(Debug, thiserror::Error)]
+pub enum ConfigError {
+    #[error("failed to load configuration: {0}")]
+    Figment(#[from] Box<figment::Error>),
+    #[error("config file not found: {0}")]
+    Missing(PathBuf),
+    #[error("invalid configuration: {0}")]
+    Invalid(String),
+}
+
+impl From<figment::Error> for ConfigError {
+    fn from(e: figment::Error) -> Self {
+        ConfigError::Figment(Box::new(e))
+    }
+}
+
+/// Legacy/alternate env var for the rating-link HMAC key (spec §1).
+pub const ENV_SECRET_ALIAS: &str = "DAILY_EPUB_SECRET";
+
+/// Root configuration document (§3.14).
+///
+/// Unknown *top-level* keys are ignored on purpose: the prefix `DAILY_EPUB_` is
+/// shared with plain operator env vars such as [`ENV_SECRET_ALIAS`].
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(default)]
+pub struct Config {
+    /// IANA tz used for day boundaries and `--date` (§3.14, notes §2).
+    pub timezone: String,
+    /// Ingest window size in hours (§3.1).
+    pub lookback_hours: u32,
+    /// How many articles the lineup should contain (§3.6 stage B).
+    pub target_article_count: usize,
+    /// How many articles survive the heuristic pre-filter (§3.5).
+    pub prefilter_keep: usize,
+    /// Days of published files kept in the publish dirs (§3.11).
+    pub retention_days: u32,
+    /// Hard cost ceiling per run (§3.6 guardrail).
+    pub max_daily_usd: f64,
+    /// Include the Wikipedia Current Events section (§3.8).
+    pub world_briefing: bool,
+
+    /// SQLite file; parent dirs are created on open.
+    pub database_path: PathBuf,
+    /// Default artifact output directory (overridden by `generate --out`).
+    pub out_dir: PathBuf,
+    /// Scour interests OPML used to seed the taste profile (§3.6).
+    pub interests_opml: PathBuf,
+
+    pub miniflux: MinifluxConfig,
+    pub deepseek: DeepseekConfig,
+    pub curation: CurationConfig,
+    pub publish: PublishConfig,
+    pub xtc: XtcConfig,
+    pub server: ServerConfig,
+}
+
+impl Default for Config {
+    fn default() -> Self {
+        Self {
+            timezone: "America/New_York".into(),
+            lookback_hours: 26,
+            target_article_count: 20,
+            prefilter_keep: 120,
+            retention_days: 21,
+            max_daily_usd: 2.0,
+            world_briefing: true,
+            database_path: PathBuf::from("/var/lib/daily-epub/daily-epub.db"),
+            out_dir: PathBuf::from("/var/lib/daily-epub/out"),
+            interests_opml: PathBuf::from("data/scour-interests.opml"),
+            miniflux: MinifluxConfig::default(),
+            deepseek: DeepseekConfig::default(),
+            curation: CurationConfig::default(),
+            publish: PublishConfig::default(),
+            xtc: XtcConfig::default(),
+            server: ServerConfig::default(),
+        }
+    }
+}
+
+/// `[miniflux]` — API client settings (§3.1).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(deny_unknown_fields, default)]
+pub struct MinifluxConfig {
+    pub base_url: String,
+    /// `X-Auth-Token`; supply via `DAILY_EPUB_MINIFLUX__API_KEY`.
+    pub api_key: Option<String>,
+    /// Page size for `GET /v1/entries` (Miniflux caps this at 250).
+    pub page_limit: u32,
+}
+
+impl Default for MinifluxConfig {
+    fn default() -> Self {
+        Self {
+            base_url: "http://127.0.0.1:8082".into(),
+            api_key: None,
+            page_limit: 250,
+        }
+    }
+}
+
+/// `[deepseek]` — LLM endpoint, model and pricing (§3.6, notes "verified facts").
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(deny_unknown_fields, default)]
+pub struct DeepseekConfig {
+    pub base_url: String,
+    pub model: String,
+    /// Supply via `DAILY_EPUB_DEEPSEEK__API_KEY`.
+    pub api_key: Option<String>,
+    /// Articles per stage-A scoring request (§3.6).
+    pub score_batch_size: usize,
+    pub score_temperature: f32,
+    pub editorial_temperature: f32,
+    /// USD per 1M cache-miss input tokens.
+    pub price_input_per_mtok: f64,
+    /// USD per 1M prefix-cache-hit input tokens.
+    pub price_cached_input_per_mtok: f64,
+    /// USD per 1M output tokens.
+    pub price_output_per_mtok: f64,
+}
+
+impl Default for DeepseekConfig {
+    fn default() -> Self {
+        Self {
+            base_url: "https://api.deepseek.com/v1".into(),
+            model: "deepseek-v4-flash".into(),
+            api_key: None,
+            score_batch_size: 12,
+            score_temperature: 0.3,
+            editorial_temperature: 0.8,
+            price_input_per_mtok: 0.14,
+            price_cached_input_per_mtok: 0.0028,
+            price_output_per_mtok: 0.28,
+        }
+    }
+}
+
+/// `[curation]` — pre-filter and section palette (§3.5, §3.6).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(deny_unknown_fields, default)]
+pub struct CurationConfig {
+    /// Miniflux feed ids or site URLs that can never be dropped (§3.5).
+    pub always_include_feeds: Vec<String>,
+    /// Hosts excluded outright (§3.5).
+    pub blocked_domains: Vec<String>,
+    /// Extra paywalled hosts, merged with [`crate::extract::DEFAULT_PAYWALL_DOMAINS`]
+    /// by the extraction stage's `excerpt_only` heuristic (§3.3).
+    pub paywall_domains: Vec<String>,
+    /// The only section names the LLM may use (§3.6 stage B).
+    pub sections: Vec<String>,
+}
+
+impl Default for CurationConfig {
+    fn default() -> Self {
+        Self {
+            always_include_feeds: Vec::new(),
+            blocked_domains: Vec::new(),
+            paywall_domains: Vec::new(),
+            sections: [
+                "Top Stories",
+                "Tech & Engineering",
+                "Science & Space",
+                "AI & Machine Learning",
+                "Culture & Essays",
+                "Boston & Local",
+                "Niche Corner",
+                "From the Blogroll",
+            ]
+            .iter()
+            .map(|s| s.to_string())
+            .collect(),
+        }
+    }
+}
+
+/// `[publish]` — where finished artifacts land (§3.11).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(deny_unknown_fields, default)]
+pub struct PublishConfig {
+    /// BookOrbit "The Daily EPUB" library watched folder.
+    pub bookorbit_dir: PathBuf,
+    /// Directory served at `/files/xtc/`.
+    pub xtc_dir: PathBuf,
+}
+
+impl Default for PublishConfig {
+    fn default() -> Self {
+        Self {
+            bookorbit_dir: PathBuf::from("/srv/bookorbit/libraries/daily-epub"),
+            xtc_dir: PathBuf::from("/var/lib/daily-epub/xtc"),
+        }
+    }
+}
+
+/// XTC output flavour (§3.11).
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "lowercase")]
+pub enum XtcFormat {
+    /// 1-bit.
+    Xtc,
+    /// 2-bit grayscale — the default (better image quality).
+    Xtch,
+}
+
+impl XtcFormat {
+    /// Value passed to the converter's `-f` flag.
+    pub fn as_str(self) -> &'static str {
+        match self {
+            XtcFormat::Xtc => "xtc",
+            XtcFormat::Xtch => "xtch",
+        }
+    }
+
+    /// File extension of the produced artifact.
+    pub fn extension(self) -> &'static str {
+        self.as_str()
+    }
+}
+
+/// `[xtc]` — invocation of `epub-to-xtc-converter` (§3.11, notes "verified facts").
+///
+/// The converter has no global npm bin, so `command` + `args` form the prefix and
+/// the code appends `<input.epub> -o <output> -f <format>` (plus `-c <settings>`).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(deny_unknown_fields, default)]
+pub struct XtcConfig {
+    pub enabled: bool,
+    pub command: String,
+    pub args: Vec<String>,
+    pub format: XtcFormat,
+    /// Optional settings JSON passed as `-c`.
+    pub settings: Option<PathBuf>,
+}
+
+impl Default for XtcConfig {
+    fn default() -> Self {
+        Self {
+            enabled: true,
+            command: "node".into(),
+            args: vec![
+                "/opt/epub-to-xtc-converter/cli/index.js".into(),
+                "convert".into(),
+            ],
+            format: XtcFormat::Xtch,
+            settings: None,
+        }
+    }
+}
+
+/// `[server]` — axum listener and rating-link signing (§3.9, §3.12).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+#[serde(deny_unknown_fields, default)]
+pub struct ServerConfig {
+    pub bind: String,
+    /// Base URL rating links are built from.
+    pub public_url: String,
+    /// HMAC key for rating tokens; supply via `DAILY_EPUB_SERVER__HMAC_SECRET`.
+    pub hmac_secret: Option<String>,
+    /// Optional Basic auth for `/opds/xtc.xml` and `/files/xtc/`.
+    pub basic_auth_user: Option<String>,
+    pub basic_auth_pass: Option<String>,
+}
+
+impl Default for ServerConfig {
+    fn default() -> Self {
+        Self {
+            bind: "127.0.0.1:3499".into(),
+            public_url: "https://daily.hallada.net".into(),
+            hmac_secret: None,
+            basic_auth_user: None,
+            basic_auth_pass: None,
+        }
+    }
+}
+
+impl Config {
+    /// Build the figment layer stack. `path` is required to exist when explicit.
+    fn figment(path: Option<&Path>, require_file: bool) -> Result<Figment, ConfigError> {
+        let mut fig = Figment::from(Serialized::defaults(Config::default()));
+        if let Some(p) = path {
+            if require_file && !p.exists() {
+                return Err(ConfigError::Missing(p.to_path_buf()));
+            }
+            if p.exists() {
+                fig = fig.merge(Toml::file(p));
+            }
+        }
+        Ok(fig.merge(Env::prefixed(ENV_PREFIX).split(ENV_SPLIT)))
+    }
+
+    /// Load config for the CLI: explicit `--config` path, else `./config.toml`
+    /// when it exists, then `DAILY_EPUB_*` env overrides (§3.14).
+    pub fn load(explicit: Option<&Path>) -> Result<Self, ConfigError> {
+        let (path, require) = match explicit {
+            Some(p) => (Some(p.to_path_buf()), true),
+            None => (Some(PathBuf::from(DEFAULT_CONFIG_FILE)), false),
+        };
+        let mut config: Config = Self::figment(path.as_deref(), require)?.extract()?;
+        // §1 tells the operator to set `DAILY_EPUB_SECRET`; §3.14 calls the key
+        // `server.hmac_secret`. Accept both, with the explicit key winning.
+        if config.server.hmac_secret.is_none() {
+            config.server.hmac_secret = std::env::var(ENV_SECRET_ALIAS)
+                .ok()
+                .filter(|v| !v.is_empty());
+        }
+        config.validate()?;
+        Ok(config)
+    }
+
+    /// Cheap sanity checks so misconfiguration fails at startup, not mid-run.
+    pub fn validate(&self) -> Result<(), ConfigError> {
+        if self.lookback_hours == 0 {
+            return Err(ConfigError::Invalid("lookback_hours must be > 0".into()));
+        }
+        if self.target_article_count == 0 {
+            return Err(ConfigError::Invalid(
+                "target_article_count must be > 0".into(),
+            ));
+        }
+        if self.prefilter_keep < self.target_article_count {
+            return Err(ConfigError::Invalid(
+                "prefilter_keep must be >= target_article_count".into(),
+            ));
+        }
+        if self.curation.sections.is_empty() {
+            return Err(ConfigError::Invalid(
+                "curation.sections must not be empty".into(),
+            ));
+        }
+        self.tz()?;
+        Ok(())
+    }
+
+    /// Resolve [`Config::timezone`] into a `jiff` time zone (notes §2).
+    pub fn tz(&self) -> Result<jiff::tz::TimeZone, ConfigError> {
+        jiff::tz::TimeZone::get(&self.timezone)
+            .map_err(|e| ConfigError::Invalid(format!("unknown timezone {}: {e}", self.timezone)))
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use figment::Jail;
+
+    #[test]
+    fn defaults_match_the_spec() {
+        let c = Config::default();
+        assert_eq!(c.timezone, "America/New_York");
+        assert_eq!(c.lookback_hours, 26);
+        assert_eq!(c.target_article_count, 20);
+        assert_eq!(c.prefilter_keep, 120);
+        assert_eq!(c.retention_days, 21);
+        assert_eq!(c.max_daily_usd, 2.0);
+        assert!(c.world_briefing);
+        assert_eq!(c.deepseek.model, "deepseek-v4-flash");
+        assert_eq!(c.xtc.format, XtcFormat::Xtch);
+        assert_eq!(c.curation.sections.len(), 8);
+        c.validate().unwrap();
+    }
+
+    #[test]
+    // `Jail::expect_with` dictates the closure's `figment::Error` return type.
+    #[allow(clippy::result_large_err)]
+    fn toml_then_env_layering() {
+        Jail::expect_with(|jail| {
+            jail.create_file(
+                "config.toml",
+                r#"
+                lookback_hours = 30
+                world_briefing = false
+
+                [miniflux]
+                base_url = "http://127.0.0.1:9999"
+
+                [curation]
+                sections = ["Top Stories", "Niche Corner"]
+
+                [xtc]
+                command = "node"
+                args = ["/opt/epub-to-xtc-converter/cli/index.js", "convert"]
+                format = "xtc"
+                "#,
+            )?;
+            jail.set_env("DAILY_EPUB_MINIFLUX__API_KEY", "secret-token");
+            jail.set_env("DAILY_EPUB_TARGET_ARTICLE_COUNT", "12");
+            jail.set_env("DAILY_EPUB_SERVER__HMAC_SECRET", "hunter2");
+
+            let c = Config::load(None).map_err(|e| figment::Error::from(e.to_string()))?;
+            // from file
+            assert_eq!(c.lookback_hours, 30);
+            assert!(!c.world_briefing);
+            assert_eq!(c.miniflux.base_url, "http://127.0.0.1:9999");
+            assert_eq!(c.curation.sections, ["Top Stories", "Niche Corner"]);
+            assert_eq!(c.xtc.format, XtcFormat::Xtc);
+            assert_eq!(c.xtc.args.len(), 2);
+            // from env
+            assert_eq!(c.miniflux.api_key.as_deref(), Some("secret-token"));
+            assert_eq!(c.target_article_count, 12);
+            assert_eq!(c.server.hmac_secret.as_deref(), Some("hunter2"));
+            // untouched default
+            assert_eq!(c.retention_days, 21);
+            assert_eq!(c.timezone, "America/New_York");
+            Ok(())
+        });
+    }
+
+    #[test]
+    fn explicit_missing_path_is_an_error() {
+        assert!(matches!(
+            Config::load(Some(Path::new("/nonexistent/daily-epub.toml"))),
+            Err(ConfigError::Missing(_))
+        ));
+    }
+
+    #[test]
+    fn shipped_example_config_parses() {
+        let example = Path::new(env!("CARGO_MANIFEST_DIR")).join("config.example.toml");
+        let c = Config::load(Some(&example)).expect("config.example.toml must parse");
+        assert_eq!(c.xtc.command, "node");
+        assert_eq!(c.xtc.format, XtcFormat::Xtch);
+        assert_eq!(c.server.bind, "127.0.0.1:3499");
+        assert_eq!(c.deepseek.base_url, "https://api.deepseek.com/v1");
+    }
+
+    #[test]
+    fn validation_rejects_nonsense() {
+        assert!(
+            Config {
+                prefilter_keep: 5,
+                ..Config::default()
+            }
+            .validate()
+            .is_err()
+        );
+        assert!(
+            Config {
+                timezone: "Mars/Olympus_Mons".into(),
+                ..Config::default()
+            }
+            .validate()
+            .is_err()
+        );
+        assert!(
+            Config {
+                lookback_hours: 0,
+                ..Config::default()
+            }
+            .validate()
+            .is_err()
+        );
+    }
+}
diff --git a/src/curate/editorial.rs b/src/curate/editorial.rs
new file mode 100644
index 0000000..1109806
--- /dev/null
+++ b/src/curate/editorial.rs
@@ -0,0 +1,634 @@
+//! Stage C — summaries, section intros and the front page (spec §3.6).
+//!
+//! Voice: warm, literate, a little playful; never fabricates facts that are not
+//! present in the summaries.
+//!
+//! Everything here is best-effort. If the cost ceiling trips mid-way (§3.6) or a
+//! call fails, the affected article silently falls back to its own opening words
+//! and the run continues — an issue with plain excerpts is far better than no
+//! issue at all.
+
+use std::collections::BTreeMap;
+use std::fmt::Write as _;
+
+use serde::{Deserialize, Serialize};
+
+use super::llm::{LlmClient, LlmError};
+use super::{escape_html, html_to_text, text_to_paragraphs, truncate_tokens, truncate_words};
+use crate::types::{ArticleId, Editorial, Lineup, Pick};
+
+/// Article text is truncated to roughly this many tokens per summary call (§3.6).
+pub const SUMMARY_INPUT_TOKEN_BUDGET: usize = 5000;
+/// Target length of the "From the Editor" front page, in words (§3.6).
+pub const FRONT_PAGE_WORDS: (usize, usize) = (250, 400);
+/// Words of body text used when a summary has to fall back to the excerpt.
+pub const FALLBACK_SUMMARY_WORDS: usize = 45;
+
+// ---------------------------------------------------------------------------
+// Prompts (reusable instructions here; per-call material in the user message)
+// ---------------------------------------------------------------------------
+
+/// Per-article summary instructions (§3.6 stage C).
+pub const SUMMARY_INSTRUCTIONS: &str = "\
+TASK: write the newspaper abstract for one article in today's issue.
+
+Two or three sentences, 40–70 words, present tense, third person. It runs under \
+the headline in the \"In This Issue\" page, so the reader decides from it alone \
+whether to open the piece.
+
+DO
+- Say what the article actually argues, reports or builds — the specific claim, \
+number, method or story, not the topic.
+- Add the one detail that makes it worth his time: the surprising result, the \
+scale, the person involved, the unusual method.
+- Match the piece's register: a technical post-mortem gets a technical abstract, \
+an essay gets an essayistic one.
+- Stay strictly inside the supplied text.
+
+DO NOT
+- Tease (\"you won't believe what happens next\"), moralize, or address the \
+reader as \"you\".
+- Open with \"This article…\", \"The author…\", \"In this post…\", or repeat the \
+headline's words.
+- Invent facts, names, numbers or conclusions that are not in the text. If the \
+text is a truncated excerpt, summarize only what is there and say it is an \
+excerpt.
+- Recommend, rate or editorialize — that is the front page's job.
+
+Return JSON exactly: {\"summary\": \"<two or three sentences>\"}";
+
+/// Front-page + section-intro instructions (§3.6 stage C).
+pub const FRONT_PAGE_INSTRUCTIONS: &str = "\
+TASK: write the front page of today's issue of The Daily EPUB.
+
+You are given the whole lineup: sections, headlines, sources and the abstract \
+written for each article. Everything you write must come from those abstracts — \
+you have not read the articles themselves, and inventing a fact would be worse \
+than saying less.
+
+Produce two things.
+
+1. \"from_the_editor\" — 250 to 400 words of prose addressed to the paper's one \
+reader. Find the two or three threads that actually run through today's lineup \
+(a shared question, an argument between two pieces, an accidental theme) and use \
+them to guide the read: what to start with over coffee, what to save for the \
+commute, what rewards patience. Name the lead story and say why it leads. It is \
+fine — good, even — to note when a day is quiet or lopsided. Voice: warm, \
+literate, lightly playful, never breathless; a real editor writing to someone \
+whose taste he knows. No bullet lists, no headings, no emoji, 2–4 paragraphs \
+separated by a blank line.
+
+2. \"section_intros\" — for EACH section name given below, two or three \
+sentences (35–60 words) introducing what is in it today. Concrete, specific to \
+these articles, no filler like \"a variety of interesting stories\". Use the \
+section names exactly as spelled in the lineup.
+
+Return JSON exactly:
+{\"from_the_editor\": \"<paragraphs separated by \\n\\n>\", \
+\"section_intros\": {\"<section name>\": \"<2-3 sentences>\"}}";
+
+/// The single front-page call's JSON response (§3.6).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct FrontPageResponse {
+    /// "From the Editor", 250–400 words.
+    pub from_the_editor: String,
+    /// Section name → 2–3 sentence intro.
+    #[serde(default)]
+    pub section_intros: BTreeMap<String, String>,
+}
+
+/// The per-article summary call's JSON response.
+#[derive(Debug, Clone, Default, Deserialize)]
+struct SummaryResponse {
+    #[serde(default)]
+    summary: String,
+}
+
+// ---------------------------------------------------------------------------
+// Per-article summaries
+// ---------------------------------------------------------------------------
+
+/// One 2–3 sentence newspaper abstract: what it argues, why it's worth reading (§3.6).
+pub async fn summarize_article(
+    llm: &LlmClient,
+    title: &str,
+    body_html: &str,
+    temperature: f32,
+) -> Result<String, LlmError> {
+    llm.meter.check_budget()?;
+    let body = truncate_tokens(&html_to_text(body_html), SUMMARY_INPUT_TOKEN_BUDGET);
+    let mut prompt = String::with_capacity(body.len() + SUMMARY_INSTRUCTIONS.len() + 256);
+    prompt.push_str(SUMMARY_INSTRUCTIONS);
+    let _ = write!(
+        prompt,
+        "\n\nHEADLINE: {}\n\nARTICLE TEXT{}:\n{}\n",
+        title.trim(),
+        if body.ends_with('…') {
+            " (truncated for length)"
+        } else {
+            ""
+        },
+        if body.is_empty() {
+            "(no body text was extracted; summarize from the headline alone and say the \
+             full text was unavailable)"
+        } else {
+            &body
+        }
+    );
+    let response: SummaryResponse = llm.complete_json(&prompt, temperature).await?;
+    let summary = response.summary.trim().to_string();
+    if summary.is_empty() {
+        return Err(LlmError::EmptyResponse);
+    }
+    Ok(summary)
+}
+
+/// Summarize every pick, returning `article_id → summary` (§3.6).
+///
+/// Stops early and returns what it has when the cost guardrail trips (§3.6).
+pub async fn summarize_all(
+    llm: &LlmClient,
+    lineup: &Lineup,
+    temperature: f32,
+) -> BTreeMap<ArticleId, String> {
+    let mut out = BTreeMap::new();
+    for (n, pick) in lineup.picks.iter().enumerate() {
+        if llm.meter.budget_exceeded() {
+            tracing::error!(
+                summarized = out.len(),
+                remaining = lineup.picks.len() - n,
+                spent_usd = llm.meter.cost_usd(),
+                "COST CEILING HIT during stage C — the remaining articles fall back to \
+                 feed excerpts as summaries"
+            );
+            break;
+        }
+        match summarize_article(
+            llm,
+            &pick.article.title,
+            &pick.article.content_html,
+            temperature,
+        )
+        .await
+        {
+            Ok(summary) => {
+                out.insert(pick.article.id, summary);
+            }
+            Err(LlmError::BudgetExceeded { spent, limit }) => {
+                tracing::error!(spent, limit, "COST CEILING HIT during stage C");
+                break;
+            }
+            Err(e) => {
+                tracing::warn!(
+                    article_id = pick.article.id,
+                    title = %pick.article.title,
+                    error = %e,
+                    "summary failed; falling back to the article's own opening"
+                );
+            }
+        }
+    }
+    tracing::info!(
+        summarized = out.len(),
+        picks = lineup.picks.len(),
+        "stage C summaries complete"
+    );
+    out
+}
+
+// ---------------------------------------------------------------------------
+// Front page
+// ---------------------------------------------------------------------------
+
+/// The single front-page + section-intro call (§3.6).
+pub async fn front_page(
+    llm: &LlmClient,
+    lineup: &Lineup,
+    summaries: &BTreeMap<ArticleId, String>,
+    temperature: f32,
+) -> Result<FrontPageResponse, LlmError> {
+    llm.meter.check_budget()?;
+    let prompt = build_front_page_prompt(lineup, summaries);
+    tracing::debug!(
+        approx_tokens = super::approx_tokens(&prompt),
+        "stage C front-page request"
+    );
+    let mut response: FrontPageResponse = llm.complete_json(&prompt, temperature).await?;
+    response.from_the_editor = response.from_the_editor.trim().to_string();
+    if response.from_the_editor.is_empty() {
+        return Err(LlmError::EmptyResponse);
+    }
+    // Keep only intros for sections that actually exist in the issue.
+    response
+        .section_intros
+        .retain(|name, text| lineup.section_order.contains(name) && !text.trim().is_empty());
+    Ok(response)
+}
+
+/// Render the front-page user prompt: the whole lineup with its abstracts (§3.6).
+pub fn build_front_page_prompt(lineup: &Lineup, summaries: &BTreeMap<ArticleId, String>) -> String {
+    let mut prompt = String::with_capacity(4096);
+    prompt.push_str(FRONT_PAGE_INSTRUCTIONS);
+    let minutes: i64 = lineup
+        .picks
+        .iter()
+        .map(|p| p.article.reading_minutes())
+        .sum();
+    let _ = write!(
+        prompt,
+        "\n\nISSUE: {} · {} articles across {} sections · about {} minutes of reading\n\
+         SECTIONS, in order: {}\n\nLINEUP\n",
+        lineup.date,
+        lineup.picks.len(),
+        lineup.section_order.len(),
+        minutes,
+        lineup.section_order.join(" | ")
+    );
+    for section in &lineup.section_order {
+        let _ = write!(prompt, "\n## {section}\n");
+        for pick in lineup.section_picks(section) {
+            let _ = write!(prompt, "{}", render_pick(pick, summaries));
+        }
+    }
+    prompt
+}
+
+fn render_pick(pick: &Pick, summaries: &BTreeMap<ArticleId, String>) -> String {
+    let a = &pick.article;
+    let mut block = String::with_capacity(400);
+    let _ = writeln!(
+        block,
+        "\n- {}{}",
+        a.title.trim(),
+        if pick.is_lead { "  [LEAD STORY]" } else { "" }
+    );
+    let _ = writeln!(
+        block,
+        "  source: {} · {} words (~{} min){}",
+        if a.feed_title.is_empty() {
+            "unknown"
+        } else {
+            a.feed_title.trim()
+        },
+        a.word_count,
+        a.reading_minutes(),
+        social_note(pick)
+    );
+    let abstract_text = summaries
+        .get(&a.id)
+        .cloned()
+        .unwrap_or_else(|| excerpt_summary(pick));
+    let _ = writeln!(block, "  abstract: {abstract_text}");
+    block
+}
+
+fn social_note(pick: &Pick) -> String {
+    if pick.article.social.is_empty() {
+        return String::new();
+    }
+    let parts: Vec<String> = pick
+        .article
+        .social
+        .iter()
+        .map(|s| {
+            format!(
+                "{} {} pts/{} comments",
+                s.source.display_name(),
+                s.score,
+                s.num_comments
+            )
+        })
+        .collect();
+    format!(" · {}", parts.join(", "))
+}
+
+// ---------------------------------------------------------------------------
+// Fallbacks (§3.6, notes §6)
+// ---------------------------------------------------------------------------
+
+/// The article's own opening words, used when no LLM summary exists (§3.6).
+pub fn excerpt_summary(pick: &Pick) -> String {
+    let text = truncate_words(
+        &html_to_text(&pick.article.content_html),
+        FALLBACK_SUMMARY_WORDS,
+    );
+    if text.is_empty() {
+        format!(
+            "From {}. (No preview text was available; open the article to read it.)",
+            if pick.article.feed_title.is_empty() {
+                "an unknown feed"
+            } else {
+                pick.article.feed_title.trim()
+            }
+        )
+    } else {
+        text
+    }
+}
+
+/// A plain, factual front page used when the model is unavailable (§3.6, notes §6).
+pub fn fallback_front_page_html(lineup: &Lineup) -> String {
+    let minutes: i64 = lineup
+        .picks
+        .iter()
+        .map(|p| p.article.reading_minutes())
+        .sum();
+    let mut text = format!(
+        "Today's issue collects {} articles across {} sections — about {} minutes of \
+         reading. Editorial notes are unavailable for this issue, so the lineup speaks \
+         for itself.",
+        lineup.picks.len(),
+        lineup.section_order.len(),
+        minutes
+    );
+    if let Some(lead) = lineup.lead() {
+        let _ = write!(
+            text,
+            "\n\nLeading today: “{}” ({}).",
+            lead.article.title.trim(),
+            if lead.article.feed_title.is_empty() {
+                "source unknown"
+            } else {
+                lead.article.feed_title.trim()
+            }
+        );
+    }
+    if !lineup.section_order.is_empty() {
+        let _ = write!(
+            text,
+            "\n\nIn this issue: {}.",
+            lineup.section_order.join(", ")
+        );
+    }
+    text_to_paragraphs(&text)
+}
+
+/// `--skip-llm` / budget-exceeded fallback: feed excerpts stand in for summaries
+/// and the front page is a plain stats line (§3.6, notes §6).
+pub fn fallback_editorial(lineup: &Lineup) -> Editorial {
+    Editorial {
+        front_page_html: fallback_front_page_html(lineup),
+        section_intros: BTreeMap::new(),
+        summaries: lineup
+            .picks
+            .iter()
+            .map(|pick| (pick.article.id, excerpt_summary(pick)))
+            .collect(),
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Stage driver
+// ---------------------------------------------------------------------------
+
+/// Stage C end to end: summaries, then one front-page call, with excerpts filling
+/// every gap (§3.6).
+pub async fn run(llm: &LlmClient, lineup: &Lineup, temperature: f32) -> Editorial {
+    if lineup.picks.is_empty() {
+        return fallback_editorial(lineup);
+    }
+
+    let mut summaries = summarize_all(llm, lineup, temperature).await;
+    let missing: Vec<&Pick> = lineup
+        .picks
+        .iter()
+        .filter(|p| !summaries.contains_key(&p.article.id))
+        .collect();
+    if !missing.is_empty() {
+        tracing::warn!(
+            count = missing.len(),
+            "using feed excerpts as summaries for articles the model did not cover"
+        );
+        for pick in missing {
+            summaries.insert(pick.article.id, excerpt_summary(pick));
+        }
+    }
+
+    let (front_page_html, section_intros) =
+        match front_page(llm, lineup, &summaries, temperature).await {
+            Ok(response) => (
+                text_to_paragraphs(&response.from_the_editor),
+                response.section_intros,
+            ),
+            Err(e) => {
+                tracing::error!(error = %e,
+                    "front-page generation failed; using the plain front page");
+                (fallback_front_page_html(lineup), BTreeMap::new())
+            }
+        };
+
+    Editorial {
+        front_page_html,
+        section_intros,
+        summaries,
+    }
+}
+
+/// Escape-and-wrap helper for callers rendering a summary straight into XHTML.
+pub fn summary_to_html(summary: &str) -> String {
+    format!("<p>{}</p>", escape_html(summary.trim()))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::config::DeepseekConfig;
+    use crate::curate::llm::{MockBackend, UsageMeter};
+    use crate::curate::prefilter::tests::article;
+    use crate::types::TokenUsage;
+    use std::sync::Arc;
+
+    const FRONT_PAGE_FIXTURE: &str = include_str!(concat!(
+        env!("CARGO_MANIFEST_DIR"),
+        "/tests/fixtures/deepseek_front_page.json"
+    ));
+
+    fn pick(id: i64, title: &str, section: &str, is_lead: bool) -> Pick {
+        let mut a = article(id, title, 900);
+        a.content_html = format!("<p>{title} opens with a specific, concrete claim.</p>");
+        Pick {
+            article: a,
+            section: section.into(),
+            position: 1,
+            is_lead,
+            summary: None,
+            llm: None,
+            discussion: None,
+        }
+    }
+
+    fn lineup() -> Lineup {
+        Lineup {
+            date: "2026-08-15".parse().expect("date"),
+            picks: vec![
+                pick(1, "Migrating 40TB off Postgres", "Top Stories", true),
+                pick(2, "The MBTA slow-zone dataset", "Boston & Local", false),
+            ],
+            section_order: vec!["Top Stories".into(), "Boston & Local".into()],
+        }
+    }
+
+    fn client(backend: Arc<MockBackend>, limit: f64) -> LlmClient {
+        LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), limit),
+            backend,
+        )
+    }
+
+    #[tokio::test]
+    async fn summary_prompt_carries_headline_and_truncated_body() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(
+            r#"{"summary": "A team moves 40TB of relational data off Postgres and documents every rollback."}"#,
+            TokenUsage::default(),
+        );
+        let llm = client(Arc::clone(&backend), 2.0);
+        let body = format!("<p>{}</p>", "word ".repeat(20_000));
+        let summary = summarize_article(&llm, "Migrating 40TB", &body, 0.8)
+            .await
+            .expect("summary");
+        assert!(summary.starts_with("A team moves 40TB"));
+
+        let prompt = &backend.prompts()[0].user;
+        assert!(prompt.starts_with(SUMMARY_INSTRUCTIONS));
+        assert!(prompt.contains("HEADLINE: Migrating 40TB"));
+        assert!(prompt.contains("(truncated for length)"));
+        // ~5k tokens ≈ 20k characters of body, not the full 100k.
+        assert!(prompt.len() < 26_000, "prompt was {} bytes", prompt.len());
+    }
+
+    #[tokio::test]
+    async fn front_page_parses_and_filters_unknown_sections() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(FRONT_PAGE_FIXTURE, TokenUsage::default());
+        let llm = client(Arc::clone(&backend), 2.0);
+        let lineup = lineup();
+        let summaries = BTreeMap::from([
+            (1, "A migration story with numbers.".to_string()),
+            (2, "Transit data, charted.".to_string()),
+        ]);
+
+        let response = front_page(&llm, &lineup, &summaries, 0.8)
+            .await
+            .expect("front page");
+        assert!(response.from_the_editor.split_whitespace().count() > 40);
+        assert_eq!(response.section_intros.len(), 2);
+        assert!(response.section_intros.contains_key("Top Stories"));
+        assert!(
+            !response.section_intros.contains_key("Niche Corner"),
+            "intros for absent sections are dropped"
+        );
+
+        let prompt = &backend.prompts()[0].user;
+        assert!(prompt.starts_with(FRONT_PAGE_INSTRUCTIONS));
+        assert!(prompt.contains("## Top Stories"));
+        assert!(prompt.contains("[LEAD STORY]"));
+        assert!(prompt.contains("abstract: A migration story with numbers."));
+        assert!(prompt.contains("2026-08-15"));
+    }
+
+    #[tokio::test]
+    async fn full_stage_c_produces_summaries_intros_and_front_page() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(r#"{"summary": "First abstract."}"#, TokenUsage::default());
+        backend.push(r#"{"summary": "Second abstract."}"#, TokenUsage::default());
+        backend.push(FRONT_PAGE_FIXTURE, TokenUsage::default());
+        let llm = client(Arc::clone(&backend), 2.0);
+
+        let editorial = run(&llm, &lineup(), 0.8).await;
+        assert_eq!(
+            backend.calls(),
+            3,
+            "one call per article plus the front page"
+        );
+        assert_eq!(editorial.summaries.len(), 2);
+        assert_eq!(editorial.summaries[&1], "First abstract.");
+        assert!(editorial.front_page_html.starts_with("<p>"));
+        assert!(editorial.front_page_html.contains("</p>"));
+        assert!(!editorial.front_page_html.contains("<script"));
+        assert_eq!(editorial.section_intros.len(), 2);
+    }
+
+    #[tokio::test]
+    async fn budget_exhaustion_degrades_to_excerpts() {
+        let backend = Arc::new(MockBackend::new());
+        // The first summary alone blows a $0.05 ceiling.
+        backend.push(
+            r#"{"summary": "The one summary we could afford."}"#,
+            TokenUsage {
+                input_tokens: 1_000_000,
+                cached_tokens: 0,
+                output_tokens: 0,
+            },
+        );
+        let llm = client(Arc::clone(&backend), 0.05);
+
+        let editorial = run(&llm, &lineup(), 0.8).await;
+        assert_eq!(backend.calls(), 1, "no further calls after the ceiling");
+        assert!(llm.meter.budget_exceeded());
+        assert_eq!(
+            editorial.summaries.len(),
+            2,
+            "every pick still has a summary"
+        );
+        assert_eq!(editorial.summaries[&1], "The one summary we could afford.");
+        assert!(
+            editorial.summaries[&2].contains("opens with a specific"),
+            "second summary fell back to the excerpt: {}",
+            editorial.summaries[&2]
+        );
+        // The front page degraded to the plain version.
+        assert!(editorial.front_page_html.contains("2 articles"));
+        assert!(editorial.section_intros.is_empty());
+    }
+
+    #[tokio::test]
+    async fn a_failed_summary_call_is_not_fatal() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push_error("400 bad request");
+        backend.push(r#"{"summary": "Second abstract."}"#, TokenUsage::default());
+        backend.push_error("500 front page exploded");
+        let llm = client(Arc::clone(&backend), 2.0);
+
+        let editorial = run(&llm, &lineup(), 0.8).await;
+        assert_eq!(editorial.summaries.len(), 2);
+        assert!(editorial.summaries[&1].contains("opens with a specific"));
+        assert_eq!(editorial.summaries[&2], "Second abstract.");
+        assert!(editorial.front_page_html.contains("Leading today"));
+    }
+
+    #[test]
+    fn fallback_editorial_covers_every_pick() {
+        let lineup = lineup();
+        let editorial = fallback_editorial(&lineup);
+        assert_eq!(editorial.summaries.len(), lineup.picks.len());
+        assert!(editorial.section_intros.is_empty());
+        assert!(editorial.front_page_html.contains("2 articles"));
+        assert!(
+            editorial
+                .front_page_html
+                .contains("Top Stories, Boston &amp; Local")
+        );
+        assert!(editorial.front_page_html.starts_with("<p>"));
+
+        // An empty lineup is still a valid editorial.
+        let empty = Lineup {
+            date: "2026-08-15".parse().expect("date"),
+            picks: vec![],
+            section_order: vec![],
+        };
+        let editorial = fallback_editorial(&empty);
+        assert!(editorial.summaries.is_empty());
+        assert!(editorial.front_page_html.contains("0 articles"));
+    }
+
+    #[test]
+    fn excerpt_summary_handles_empty_bodies() {
+        let mut p = pick(9, "No body here", "Top Stories", false);
+        p.article.content_html = String::new();
+        assert!(excerpt_summary(&p).contains("No preview text"));
+        assert_eq!(summary_to_html("a <b> c"), "<p>a &lt;b&gt; c</p>");
+    }
+}
diff --git a/src/curate/llm.rs b/src/curate/llm.rs
new file mode 100644
index 0000000..20cbee0
--- /dev/null
+++ b/src/curate/llm.rs
@@ -0,0 +1,708 @@
+//! DeepSeek client and token/cost accounting (spec §3.6).
+//!
+//! The OpenAI-compatible chat-completions endpoint at `https://api.deepseek.com/v1`.
+//! DeepSeek prefix-caches automatically, so the (identical, long) taste-profile
+//! system prompt must come first in every request: cached input is $0.0028/M vs
+//! $0.14/M.
+//!
+//! **Why not `async-openai`** (spec §2 crate table): the published crate exposes
+//! neither `Client` nor `types::chat` under any feature combination we could get
+//! to build here, and it would drag in a second HTTP stack besides the shared
+//! `reqwest` client (notes §4). [`DeepseekBackend`] therefore speaks the same
+//! OpenAI-compatible wire protocol directly — about 80 lines, no new dependency,
+//! and the request/response shapes are pinned by this module's tests. The
+//! dependency was dropped from `Cargo.toml`; swapping a vendor SDK back in later
+//! is a single [`ChatBackend`] impl and nothing else moves.
+//!
+//! Every call in the project goes through [`LlmClient`], which
+//!
+//! 1. always sends [`LlmClient::system_prompt`] as the **first** message, byte for
+//!    byte identical across requests (that is what makes the prefix cache hit),
+//! 2. folds the response's token usage into a shared [`UsageMeter`], and
+//! 3. refuses further work once `max_daily_usd` has been spent (§3.6 guardrail).
+//!
+//! The network is reached through a [`ChatBackend`] so tests can inject canned
+//! responses ([`MockBackend`]) without touching the wire (notes §6).
+
+use std::future::Future;
+use std::pin::Pin;
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::sync::{Arc, Mutex};
+
+use serde::Deserialize;
+use serde_json::json;
+
+use crate::config::DeepseekConfig;
+use crate::http::RetryPolicy;
+use crate::types::TokenUsage;
+
+/// `response_format` value used for every structured call (§3.6).
+pub const JSON_OBJECT: &str = "json_object";
+
+#[derive(Debug, thiserror::Error)]
+pub enum LlmError {
+    #[error("deepseek api key is not configured (set DAILY_EPUB_DEEPSEEK__API_KEY)")]
+    MissingApiKey,
+    #[error("deepseek request failed: {0}")]
+    Api(String),
+    /// A 5xx/429/network failure: worth retrying (crate table "retry").
+    #[error("deepseek request failed (transient): {0}")]
+    Transient(String),
+    #[error("deepseek returned an empty completion")]
+    EmptyResponse,
+    #[error("deepseek returned unparseable JSON: {0}")]
+    Json(#[from] serde_json::Error),
+    /// The `max_daily_usd` ceiling was reached: callers must skip remaining
+    /// editorial calls and fall back to feed excerpts, loudly (§3.6).
+    #[error("daily cost ceiling of ${limit:.2} reached (spent ${spent:.4})")]
+    BudgetExceeded { spent: f64, limit: f64 },
+}
+
+impl LlmError {
+    /// True for failures the [`RetryPolicy`] should retry.
+    pub fn is_transient(&self) -> bool {
+        matches!(self, LlmError::Transient(_))
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Usage metering (§3.6 cost guardrail, notes §5)
+// ---------------------------------------------------------------------------
+
+/// Shared token/cost accumulator enforcing `max_daily_usd` (notes §5).
+///
+/// Cloning shares the counters: one meter per run, cloned into every stage.
+#[derive(Debug, Clone)]
+pub struct UsageMeter {
+    inner: Arc<Mutex<TokenUsage>>,
+    /// Sticky: once the ceiling is crossed the run stays degraded (§3.6).
+    exceeded: Arc<AtomicBool>,
+    limit_usd: f64,
+    price_input: f64,
+    price_cached: f64,
+    price_output: f64,
+}
+
+impl UsageMeter {
+    pub fn new(cfg: &DeepseekConfig, limit_usd: f64) -> Self {
+        Self {
+            inner: Arc::new(Mutex::new(TokenUsage::default())),
+            exceeded: Arc::new(AtomicBool::new(false)),
+            limit_usd,
+            price_input: cfg.price_input_per_mtok,
+            price_cached: cfg.price_cached_input_per_mtok,
+            price_output: cfg.price_output_per_mtok,
+        }
+    }
+
+    /// Seed the meter with spend already recorded for the day (§3.6): the
+    /// guardrail is a *daily* ceiling, not a per-run one.
+    pub fn preload_cost(&self, spent_usd: f64) {
+        if spent_usd > 0.0 && self.limit_usd > 0.0 && spent_usd >= self.limit_usd {
+            self.trip("prior spend for today already exceeds the ceiling");
+        }
+    }
+
+    /// Fold one response's usage in and return the running total.
+    pub fn record(&self, usage: TokenUsage) -> TokenUsage {
+        let total = match self.inner.lock() {
+            Ok(mut guard) => {
+                guard.add(usage);
+                *guard
+            }
+            // A poisoned mutex must not abort a run: accounting is advisory.
+            Err(poisoned) => {
+                let mut guard = poisoned.into_inner();
+                guard.add(usage);
+                *guard
+            }
+        };
+        let cost = self.cost_of(total);
+        tracing::debug!(
+            input = usage.input_tokens,
+            cached = usage.cached_tokens,
+            output = usage.output_tokens,
+            total_cost_usd = cost,
+            "recorded llm usage"
+        );
+        if self.limit_usd > 0.0 && cost > self.limit_usd && !self.exceeded.load(Ordering::SeqCst) {
+            self.trip("token spend crossed the ceiling");
+        }
+        total
+    }
+
+    fn trip(&self, why: &str) {
+        self.exceeded.store(true, Ordering::SeqCst);
+        tracing::error!(
+            spent_usd = self.cost_usd(),
+            limit_usd = self.limit_usd,
+            "LLM budget exceeded ({why}): remaining editorial calls will be skipped \
+             and feed excerpts used instead"
+        );
+    }
+
+    pub fn total(&self) -> TokenUsage {
+        match self.inner.lock() {
+            Ok(guard) => *guard,
+            Err(poisoned) => *poisoned.into_inner(),
+        }
+    }
+
+    fn cost_of(&self, usage: TokenUsage) -> f64 {
+        usage.cost_usd(self.price_input, self.price_cached, self.price_output)
+    }
+
+    pub fn cost_usd(&self) -> f64 {
+        self.cost_of(self.total())
+    }
+
+    pub fn limit_usd(&self) -> f64 {
+        self.limit_usd
+    }
+
+    /// True once the ceiling has been crossed — editorial stages check this and
+    /// silently degrade to excerpts (§3.6).
+    pub fn budget_exceeded(&self) -> bool {
+        self.exceeded.load(Ordering::SeqCst)
+    }
+
+    /// `Err(BudgetExceeded)` once the run has spent more than `max_daily_usd` (§3.6).
+    pub fn check_budget(&self) -> Result<(), LlmError> {
+        if self.budget_exceeded() {
+            return Err(LlmError::BudgetExceeded {
+                spent: self.cost_usd(),
+                limit: self.limit_usd,
+            });
+        }
+        Ok(())
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Backend abstraction (notes §6: no network in tests)
+// ---------------------------------------------------------------------------
+
+/// One chat completion request. The system prompt is an [`Arc`] so that the
+/// identical bytes are reused for every call (DeepSeek prefix caching, §3.6).
+#[derive(Debug, Clone)]
+pub struct ChatRequest {
+    pub model: String,
+    pub system: Arc<String>,
+    pub user: String,
+    pub temperature: f32,
+    /// Ask for `response_format: {"type": "json_object"}` (§3.6).
+    pub json: bool,
+}
+
+/// One chat completion response, reduced to what the pipeline needs.
+#[derive(Debug, Clone, Default)]
+pub struct ChatCompletion {
+    pub content: String,
+    pub usage: TokenUsage,
+}
+
+type BoxFuture<'a, T> = Pin<Box<dyn Future<Output = T> + Send + 'a>>;
+
+/// The seam between [`LlmClient`] and the network (notes §6).
+pub trait ChatBackend: std::fmt::Debug + Send + Sync {
+    fn complete<'a>(&'a self, req: ChatRequest) -> BoxFuture<'a, Result<ChatCompletion, LlmError>>;
+}
+
+/// LLM calls are slow; the shared 10s HTTP timeout would kill them (notes §4).
+const LLM_TIMEOUT: std::time::Duration = std::time::Duration::from_secs(180);
+
+/// The real thing: the OpenAI-compatible endpoint at `deepseek.base_url` (§3.6).
+#[derive(Debug, Clone)]
+pub struct DeepseekBackend {
+    http: reqwest::Client,
+    endpoint: String,
+    api_key: String,
+}
+
+impl DeepseekBackend {
+    pub fn new(cfg: &DeepseekConfig) -> Result<Self, LlmError> {
+        let api_key = cfg
+            .api_key
+            .as_deref()
+            .map(str::trim)
+            .filter(|k| !k.is_empty())
+            .ok_or(LlmError::MissingApiKey)?
+            .to_string();
+        let http = crate::http::build_client(LLM_TIMEOUT)
+            .map_err(|e| LlmError::Api(format!("building the deepseek http client: {e}")))?;
+        Ok(Self {
+            http,
+            endpoint: format!("{}/chat/completions", cfg.base_url.trim_end_matches('/')),
+            api_key,
+        })
+    }
+}
+
+impl ChatBackend for DeepseekBackend {
+    fn complete<'a>(&'a self, req: ChatRequest) -> BoxFuture<'a, Result<ChatCompletion, LlmError>> {
+        Box::pin(async move {
+            let mut body = json!({
+                "model": req.model,
+                "messages": [
+                    // FIRST and byte-identical across every request: prefix cache (§3.6).
+                    {"role": "system", "content": req.system.as_str()},
+                    {"role": "user", "content": req.user},
+                ],
+                "temperature": req.temperature,
+                "stream": false,
+            });
+            if req.json
+                && let Some(obj) = body.as_object_mut()
+            {
+                obj.insert("response_format".into(), json!({"type": JSON_OBJECT}));
+            }
+
+            let response = self
+                .http
+                .post(&self.endpoint)
+                .bearer_auth(&self.api_key)
+                .json(&body)
+                .send()
+                .await
+                .map_err(classify_reqwest_error)?;
+
+            let status = response.status();
+            if !status.is_success() {
+                let detail = response.text().await.unwrap_or_default();
+                let detail = detail.chars().take(500).collect::<String>();
+                let msg = format!("{status}: {detail}");
+                return Err(if status.is_server_error() || status.as_u16() == 429 {
+                    LlmError::Transient(msg)
+                } else {
+                    LlmError::Api(msg)
+                });
+            }
+
+            let parsed: ApiResponse = response.json().await.map_err(|e| {
+                LlmError::Api(format!("decoding the deepseek chat completion: {e}"))
+            })?;
+            let content = parsed
+                .choices
+                .into_iter()
+                .next()
+                .and_then(|c| c.message.content)
+                .filter(|c| !c.trim().is_empty())
+                .ok_or(LlmError::EmptyResponse)?;
+            let usage = parsed.usage.map(usage_from_api).unwrap_or_default();
+            Ok(ChatCompletion { content, usage })
+        })
+    }
+}
+
+/// The slice of the chat-completions response we consume.
+#[derive(Debug, Deserialize)]
+struct ApiResponse {
+    #[serde(default)]
+    choices: Vec<ApiChoice>,
+    #[serde(default)]
+    usage: Option<ApiUsage>,
+}
+
+#[derive(Debug, Deserialize)]
+struct ApiChoice {
+    message: ApiMessage,
+}
+
+#[derive(Debug, Deserialize)]
+struct ApiMessage {
+    #[serde(default)]
+    content: Option<String>,
+}
+
+/// DeepSeek reports cache hits both OpenAI-style (`prompt_tokens_details`) and
+/// natively (`prompt_cache_hit_tokens`); we accept either (§3.6 pricing).
+#[derive(Debug, Default, Deserialize)]
+struct ApiUsage {
+    #[serde(default)]
+    prompt_tokens: i64,
+    #[serde(default)]
+    completion_tokens: i64,
+    #[serde(default)]
+    prompt_cache_hit_tokens: Option<i64>,
+    #[serde(default)]
+    prompt_tokens_details: Option<ApiPromptTokensDetails>,
+}
+
+#[derive(Debug, Default, Deserialize)]
+struct ApiPromptTokensDetails {
+    #[serde(default)]
+    cached_tokens: Option<i64>,
+}
+
+/// Split `prompt_tokens` into cache-miss and cache-hit halves (§3.6 pricing).
+fn usage_from_api(u: ApiUsage) -> TokenUsage {
+    let cached = u
+        .prompt_tokens_details
+        .as_ref()
+        .and_then(|d| d.cached_tokens)
+        .or(u.prompt_cache_hit_tokens)
+        .unwrap_or(0)
+        .max(0);
+    let prompt = u.prompt_tokens.max(0);
+    let cached = cached.min(prompt);
+    TokenUsage {
+        input_tokens: prompt - cached,
+        cached_tokens: cached,
+        output_tokens: u.completion_tokens.max(0),
+    }
+}
+
+fn classify_reqwest_error(err: reqwest::Error) -> LlmError {
+    if crate::http::is_retryable(&err) {
+        LlmError::Transient(err.to_string())
+    } else {
+        LlmError::Api(err.to_string())
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Client
+// ---------------------------------------------------------------------------
+
+/// Every LLM call in the project goes through this client (notes §5).
+#[derive(Debug, Clone)]
+pub struct LlmClient {
+    /// The taste profile, sent as the first (cacheable) system message (§3.6).
+    pub system_prompt: Arc<String>,
+    pub model: String,
+    pub meter: UsageMeter,
+    backend: Arc<dyn ChatBackend>,
+    retry: RetryPolicy,
+}
+
+impl LlmClient {
+    /// Build against the configured base URL; fails without an API key.
+    pub fn new(
+        cfg: &DeepseekConfig,
+        system_prompt: String,
+        meter: UsageMeter,
+    ) -> Result<Self, LlmError> {
+        let backend = DeepseekBackend::new(cfg)?;
+        tracing::debug!(
+            base_url = %cfg.base_url,
+            model = %cfg.model,
+            system_prompt_chars = system_prompt.len(),
+            "deepseek client ready"
+        );
+        Ok(Self::with_backend(
+            &cfg.model,
+            system_prompt,
+            meter,
+            Arc::new(backend),
+        ))
+    }
+
+    /// Construct around an arbitrary backend — the seam used by tests (notes §6).
+    pub fn with_backend(
+        model: &str,
+        system_prompt: String,
+        meter: UsageMeter,
+        backend: Arc<dyn ChatBackend>,
+    ) -> Self {
+        Self {
+            system_prompt: Arc::new(system_prompt),
+            model: model.to_string(),
+            meter,
+            backend,
+            retry: RetryPolicy::default(),
+        }
+    }
+
+    /// Raw completion: budget check → retry loop → usage accounting.
+    pub async fn complete(
+        &self,
+        user_prompt: &str,
+        temperature: f32,
+        json: bool,
+    ) -> Result<String, LlmError> {
+        self.meter.check_budget()?;
+        let req = ChatRequest {
+            model: self.model.clone(),
+            system: Arc::clone(&self.system_prompt),
+            user: user_prompt.to_string(),
+            temperature,
+            json,
+        };
+        let completion = self
+            .retry
+            .run("deepseek chat completion", LlmError::is_transient, || {
+                self.backend.complete(req.clone())
+            })
+            .await?;
+        self.meter.record(completion.usage);
+        Ok(completion.content)
+    }
+
+    /// One chat completion returning parsed JSON of type `T`, with the system
+    /// prompt first and `response_format: json_object` (§3.6).
+    pub async fn complete_json<T: serde::de::DeserializeOwned>(
+        &self,
+        user_prompt: &str,
+        temperature: f32,
+    ) -> Result<T, LlmError> {
+        let raw = self.complete(user_prompt, temperature, true).await?;
+        let cleaned = strip_code_fence(&raw);
+        match serde_json::from_str::<T>(cleaned) {
+            Ok(v) => Ok(v),
+            Err(e) => {
+                tracing::warn!(
+                    error = %e,
+                    preview = %cleaned.chars().take(400).collect::<String>(),
+                    "deepseek returned malformed JSON"
+                );
+                Err(LlmError::Json(e))
+            }
+        }
+    }
+
+    /// One plain-text completion (used for the front page / intros) (§3.6).
+    pub async fn complete_text(
+        &self,
+        user_prompt: &str,
+        temperature: f32,
+    ) -> Result<String, LlmError> {
+        self.complete(user_prompt, temperature, false).await
+    }
+}
+
+/// Models occasionally wrap JSON in ```` ```json ```` fences despite `json_object`.
+pub fn strip_code_fence(raw: &str) -> &str {
+    let trimmed = raw.trim();
+    let Some(rest) = trimmed.strip_prefix("```") else {
+        return trimmed;
+    };
+    let rest = rest.strip_prefix("json").unwrap_or(rest);
+    rest.trim_start_matches(['\n', '\r'])
+        .trim_end()
+        .trim_end_matches("```")
+        .trim()
+}
+
+// ---------------------------------------------------------------------------
+// Test backend
+// ---------------------------------------------------------------------------
+
+/// Canned-response backend for tests: pops scripted replies in order (notes §6).
+#[derive(Debug, Default)]
+pub struct MockBackend {
+    scripted: Mutex<std::collections::VecDeque<Result<ChatCompletion, String>>>,
+    /// Every prompt the code under test sent, in order.
+    pub seen: Mutex<Vec<ChatRequest>>,
+}
+
+impl MockBackend {
+    pub fn new() -> Self {
+        Self::default()
+    }
+
+    /// Queue a successful reply carrying `usage` tokens.
+    pub fn push(&self, content: impl Into<String>, usage: TokenUsage) {
+        if let Ok(mut q) = self.scripted.lock() {
+            q.push_back(Ok(ChatCompletion {
+                content: content.into(),
+                usage,
+            }));
+        }
+    }
+
+    /// Queue a permanent (non-retryable) failure.
+    pub fn push_error(&self, message: impl Into<String>) {
+        if let Ok(mut q) = self.scripted.lock() {
+            q.push_back(Err(message.into()));
+        }
+    }
+
+    pub fn calls(&self) -> usize {
+        self.seen.lock().map(|s| s.len()).unwrap_or(0)
+    }
+
+    pub fn prompts(&self) -> Vec<ChatRequest> {
+        self.seen.lock().map(|s| s.clone()).unwrap_or_default()
+    }
+}
+
+impl ChatBackend for MockBackend {
+    fn complete<'a>(&'a self, req: ChatRequest) -> BoxFuture<'a, Result<ChatCompletion, LlmError>> {
+        Box::pin(async move {
+            let next = self.scripted.lock().ok().and_then(|mut q| q.pop_front());
+            if let Ok(mut seen) = self.seen.lock() {
+                seen.push(req);
+            }
+            match next {
+                Some(Ok(c)) => Ok(c),
+                Some(Err(msg)) => Err(LlmError::Api(msg)),
+                None => Err(LlmError::Api("mock backend ran out of responses".into())),
+            }
+        })
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn cfg() -> DeepseekConfig {
+        DeepseekConfig::default()
+    }
+
+    pub(crate) fn tokens(input: i64, cached: i64, output: i64) -> TokenUsage {
+        TokenUsage {
+            input_tokens: input,
+            cached_tokens: cached,
+            output_tokens: output,
+        }
+    }
+
+    #[test]
+    fn meter_accumulates_and_prices() {
+        let meter = UsageMeter::new(&cfg(), 2.0);
+        meter.record(tokens(1_000_000, 0, 0));
+        meter.record(tokens(0, 1_000_000, 1_000_000));
+        let total = meter.total();
+        assert_eq!(total.input_tokens, 1_000_000);
+        assert_eq!(total.cached_tokens, 1_000_000);
+        assert_eq!(total.output_tokens, 1_000_000);
+        assert!((meter.cost_usd() - 0.4228).abs() < 1e-9);
+        assert!(!meter.budget_exceeded());
+        assert!(meter.check_budget().is_ok());
+    }
+
+    #[test]
+    fn meter_trips_the_budget_flag_and_stays_tripped() {
+        // Ceiling of $0.10; 1M cache-miss input tokens costs $0.14.
+        let meter = UsageMeter::new(&cfg(), 0.10);
+        meter.record(tokens(1_000_000, 0, 0));
+        assert!(meter.budget_exceeded());
+        assert!(matches!(
+            meter.check_budget(),
+            Err(LlmError::BudgetExceeded { .. })
+        ));
+        // Cloned meters share the flag.
+        assert!(meter.clone().budget_exceeded());
+    }
+
+    #[test]
+    fn preloaded_daily_spend_trips_the_flag() {
+        let meter = UsageMeter::new(&cfg(), 1.0);
+        meter.preload_cost(0.5);
+        assert!(!meter.budget_exceeded());
+        meter.preload_cost(1.5);
+        assert!(meter.budget_exceeded());
+    }
+
+    #[test]
+    fn usage_split_uses_prompt_token_details() {
+        let u: ApiUsage = serde_json::from_str(
+            r#"{"prompt_tokens": 1000, "completion_tokens": 120, "total_tokens": 1120,
+                "prompt_tokens_details": {"cached_tokens": 800}}"#,
+        )
+        .expect("fixture usage");
+        assert_eq!(usage_from_api(u), tokens(200, 800, 120));
+    }
+
+    #[test]
+    fn usage_falls_back_to_deepseek_native_cache_fields() {
+        let u: ApiUsage = serde_json::from_str(
+            r#"{"prompt_tokens": 500, "completion_tokens": 40,
+                "prompt_cache_hit_tokens": 448, "prompt_cache_miss_tokens": 52}"#,
+        )
+        .expect("fixture usage");
+        assert_eq!(usage_from_api(u), tokens(52, 448, 40));
+        // Missing usage is not an error, just zero.
+        let empty: ApiUsage = serde_json::from_str("{}").expect("empty usage");
+        assert_eq!(usage_from_api(empty), TokenUsage::default());
+    }
+
+    #[test]
+    fn code_fences_are_stripped() {
+        assert_eq!(strip_code_fence("{\"a\":1}"), "{\"a\":1}");
+        assert_eq!(strip_code_fence("```json\n{\"a\":1}\n```"), "{\"a\":1}");
+        assert_eq!(strip_code_fence("```\n{\"a\":1}\n```"), "{\"a\":1}");
+    }
+
+    fn client(backend: Arc<MockBackend>, limit: f64) -> LlmClient {
+        LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM PROMPT".into(),
+            UsageMeter::new(&cfg(), limit),
+            backend,
+        )
+    }
+
+    #[tokio::test]
+    async fn json_completion_records_usage_and_sends_system_prompt_first() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(r#"{"value": 42}"#, tokens(10, 90, 5));
+        let llm = client(Arc::clone(&backend), 2.0);
+
+        #[derive(serde::Deserialize)]
+        struct Out {
+            value: i64,
+        }
+        let out: Out = llm
+            .complete_json("score these", 0.3)
+            .await
+            .expect("mock completion");
+        assert_eq!(out.value, 42);
+        assert_eq!(llm.meter.total(), tokens(10, 90, 5));
+
+        let prompts = backend.prompts();
+        assert_eq!(prompts.len(), 1);
+        assert_eq!(prompts[0].system.as_str(), "SYSTEM PROMPT");
+        assert!(prompts[0].json);
+        assert_eq!(prompts[0].user, "score these");
+    }
+
+    #[tokio::test]
+    async fn identical_system_prompt_bytes_across_calls() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push("{}", TokenUsage::default());
+        backend.push("{}", TokenUsage::default());
+        let llm = client(Arc::clone(&backend), 2.0);
+        let _: serde_json::Value = llm.complete_json("a", 0.3).await.expect("first");
+        let _: serde_json::Value = llm.complete_json("b", 0.3).await.expect("second");
+        let prompts = backend.prompts();
+        assert_eq!(prompts[0].system.as_bytes(), prompts[1].system.as_bytes());
+    }
+
+    #[tokio::test]
+    async fn calls_are_refused_once_the_budget_is_gone() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push("{}", tokens(1_000_000, 0, 0));
+        let llm = client(Arc::clone(&backend), 0.01);
+        let _: serde_json::Value = llm.complete_json("first", 0.3).await.expect("first call");
+        let err = llm
+            .complete_text("second", 0.3)
+            .await
+            .expect_err("budget must be enforced");
+        assert!(matches!(err, LlmError::BudgetExceeded { .. }));
+        // The refused call never reached the backend.
+        assert_eq!(backend.calls(), 1);
+    }
+
+    #[tokio::test]
+    async fn malformed_json_surfaces_as_json_error() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push("not json at all", TokenUsage::default());
+        let llm = client(backend, 2.0);
+        let out: Result<serde_json::Value, _> = llm.complete_json("x", 0.3).await;
+        assert!(matches!(out, Err(LlmError::Json(_))));
+    }
+
+    #[test]
+    fn missing_api_key_is_reported() {
+        let cfg = DeepseekConfig {
+            api_key: Some("   ".into()),
+            ..DeepseekConfig::default()
+        };
+        assert!(matches!(
+            DeepseekBackend::new(&cfg),
+            Err(LlmError::MissingApiKey)
+        ));
+    }
+}
diff --git a/src/curate/mod.rs b/src/curate/mod.rs
new file mode 100644
index 0000000..43ca2ac
--- /dev/null
+++ b/src/curate/mod.rs
@@ -0,0 +1,305 @@
+//! Curation pipeline: pre-filter → LLM scoring → selection → editorial (spec §3.5, §3.6).
+//!
+//! ```text
+//! ~400 articles ─prefilter─▶ ~120 candidates ─stage A─▶ scored ─stage B─▶ lineup ─stage C─▶ editorial
+//! ```
+//!
+//! [`Curator`] is the thin orchestration layer the `generate` pipeline calls; the
+//! interesting logic lives in the stage modules. Every stage is safe to run with
+//! `llm == None` (`--skip-llm`): the prefilter order stands in for selection and
+//! feed excerpts stand in for summaries (notes §6).
+
+pub mod editorial;
+pub mod llm;
+pub mod prefilter;
+pub mod profile;
+pub mod score;
+pub mod select;
+
+use jiff::civil::Date;
+
+use crate::config::Config;
+use crate::db::Db;
+use crate::types::{Article, Editorial, Lineup, ScoredArticle};
+
+/// Runs the three curation stages against one day's articles (§3.5, §3.6).
+pub struct Curator {
+    pub config: Config,
+    pub db: Db,
+    pub llm: Option<llm::LlmClient>,
+}
+
+impl Curator {
+    /// `llm == None` corresponds to `--skip-llm`: prefilter order is used for
+    /// selection and feed excerpts stand in for summaries (notes §6).
+    pub fn new(config: Config, db: Db, llm: Option<llm::LlmClient>) -> Self {
+        Self { config, db, llm }
+    }
+
+    /// Heuristic pre-filter: 300–500 articles → `prefilter_keep` (§3.5).
+    ///
+    /// Also persists each candidate's `prefilter_score` for the day so that a
+    /// re-run of the same date is idempotent (notes §12).
+    pub async fn prefilter(
+        &self,
+        articles: Vec<Article>,
+        date: Date,
+    ) -> anyhow::Result<Vec<ScoredArticle>> {
+        let span = tracing::info_span!("prefilter", articles = articles.len());
+        let _guard = span.enter();
+
+        let ctx = prefilter::PrefilterContext::load(&self.db, date).await?;
+        let candidates = prefilter::run(articles, &ctx, &self.config);
+        for candidate in &candidates {
+            if candidate.article.id == 0 {
+                continue; // not persisted yet (dry run over synthetic articles)
+            }
+            if let Err(e) = self
+                .db
+                .upsert_score(
+                    candidate.article.id,
+                    date,
+                    Some(candidate.prefilter_score),
+                    None,
+                )
+                .await
+            {
+                tracing::warn!(article_id = candidate.article.id, error = %e,
+                    "could not persist the prefilter score");
+            }
+        }
+        Ok(candidates)
+    }
+
+    /// Stage A: batched LLM scoring of the surviving candidates (§3.6).
+    ///
+    /// A no-op under `--skip-llm`. Scores are persisted per `(article, date)`.
+    pub async fn score(&self, candidates: &mut [ScoredArticle], date: Date) -> anyhow::Result<()> {
+        let Some(llm) = self.llm.as_ref() else {
+            tracing::info!("--skip-llm: stage A scoring skipped");
+            return Ok(());
+        };
+        let span = tracing::info_span!("llm_score", candidates = candidates.len());
+        let _guard = span.enter();
+
+        let scored = score::score_all(
+            llm,
+            candidates,
+            self.config.deepseek.score_batch_size,
+            &self.config.curation.sections,
+            self.config.deepseek.score_temperature,
+        )
+        .await?;
+        tracing::info!(scored, total = candidates.len(), "stage A complete");
+
+        for candidate in candidates.iter() {
+            if candidate.article.id == 0 {
+                continue;
+            }
+            if let Some(llm_score) = candidate.llm.as_ref()
+                && let Err(e) = self
+                    .db
+                    .upsert_score(candidate.article.id, date, None, Some(llm_score))
+                    .await
+            {
+                tracing::warn!(article_id = candidate.article.id, error = %e,
+                    "could not persist the llm score");
+            }
+        }
+        Ok(())
+    }
+
+    /// Stage B: single-call lineup selection into sections (§3.6).
+    pub async fn select(
+        &self,
+        candidates: Vec<ScoredArticle>,
+        date: Date,
+    ) -> anyhow::Result<Lineup> {
+        let sections = &self.config.curation.sections;
+        let target = self.config.target_article_count;
+        let Some(llm) = self.llm.as_ref() else {
+            tracing::info!("--skip-llm: selecting by prefilter order");
+            return Ok(select::select_without_llm(
+                candidates, sections, target, date,
+            ));
+        };
+        let span = tracing::info_span!("llm_select", candidates = candidates.len());
+        let _guard = span.enter();
+
+        match select::select(llm, candidates.clone(), sections, target, date).await {
+            Ok(lineup) => Ok(lineup),
+            Err(e) => {
+                tracing::error!(error = %e,
+                    "stage B selection failed; falling back to prefilter order");
+                Ok(select::select_without_llm(
+                    candidates, sections, target, date,
+                ))
+            }
+        }
+    }
+
+    /// Stage C: per-article summaries, section intros and the front page (§3.6).
+    ///
+    /// Never fails the run: a budget trip or an API error degrades to excerpts.
+    pub async fn editorial(&self, lineup: &Lineup) -> anyhow::Result<Editorial> {
+        let Some(llm) = self.llm.as_ref() else {
+            tracing::info!("--skip-llm: using feed excerpts as summaries");
+            return Ok(editorial::fallback_editorial(lineup));
+        };
+        let span = tracing::info_span!("llm_editorial", picks = lineup.picks.len());
+        let _guard = span.enter();
+        Ok(editorial::run(llm, lineup, self.config.deepseek.editorial_temperature).await)
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Small text helpers shared by the prompt builders
+// ---------------------------------------------------------------------------
+
+/// Crude token estimate: DeepSeek averages ~4 characters per token for English
+/// prose. Only used to size prompt budgets (§3.6 stage C).
+pub fn approx_tokens(text: &str) -> usize {
+    text.len().div_ceil(4)
+}
+
+/// Strip markup and collapse whitespace, so article bodies can go into prompts
+/// as plain text (cheaper and less confusing for the model than raw HTML).
+pub fn html_to_text(html: &str) -> String {
+    /// Does `tail` open the named element, i.e. `<name` or `</name`?
+    fn opens(tail: &str, name: &str) -> bool {
+        let bytes = tail.as_bytes();
+        bytes.len() > name.len() && bytes[1..=name.len()].eq_ignore_ascii_case(name.as_bytes())
+    }
+
+    let mut out = String::with_capacity(html.len());
+    let mut rest = html;
+    while let Some(ch) = rest.chars().next() {
+        if ch != '<' {
+            out.push(ch);
+            rest = &rest[ch.len_utf8()..];
+            continue;
+        }
+        // Drop <script>/<style> bodies wholesale rather than reading them aloud.
+        for (name, close) in [("script", "</script"), ("style", "</style")] {
+            if opens(rest, name) {
+                rest = match rest[1..].find(close) {
+                    Some(idx) => &rest[1 + idx + close.len()..],
+                    None => "",
+                };
+                break;
+            }
+        }
+        // A tag becomes a word boundary.
+        rest = match rest.find('>') {
+            Some(idx) => &rest[idx + 1..],
+            None => "",
+        };
+        out.push(' ');
+    }
+
+    let decoded = out
+        .replace("&nbsp;", " ")
+        .replace("&amp;", "&")
+        .replace("&lt;", "<")
+        .replace("&gt;", ">")
+        .replace("&quot;", "\"")
+        .replace("&#39;", "'")
+        .replace("&rsquo;", "'")
+        .replace("&mdash;", "—");
+    decoded.split_whitespace().collect::<Vec<_>>().join(" ")
+}
+
+/// First `max_words` words of `text`, with an ellipsis when truncated.
+pub fn truncate_words(text: &str, max_words: usize) -> String {
+    let mut words = text.split_whitespace();
+    let head: Vec<&str> = words.by_ref().take(max_words).collect();
+    let mut out = head.join(" ");
+    if words.next().is_some() {
+        out.push('…');
+    }
+    out
+}
+
+/// Truncate to roughly `max_tokens` tokens on a word boundary (§3.6 stage C).
+pub fn truncate_tokens(text: &str, max_tokens: usize) -> String {
+    let max_chars = max_tokens.saturating_mul(4);
+    if text.len() <= max_chars {
+        return text.to_string();
+    }
+    let mut cut = max_chars.min(text.len());
+    while cut > 0 && !text.is_char_boundary(cut) {
+        cut -= 1;
+    }
+    let slice = &text[..cut];
+    let slice = slice
+        .rsplit_once(' ')
+        .map(|(head, _)| head)
+        .unwrap_or(slice);
+    format!("{slice}…")
+}
+
+/// Minimal XHTML escaping for text we drop into generated markup (§3.10).
+pub fn escape_html(text: &str) -> String {
+    let mut out = String::with_capacity(text.len());
+    for ch in text.chars() {
+        match ch {
+            '&' => out.push_str("&amp;"),
+            '<' => out.push_str("&lt;"),
+            '>' => out.push_str("&gt;"),
+            '"' => out.push_str("&quot;"),
+            '\'' => out.push_str("&#39;"),
+            c => out.push(c),
+        }
+    }
+    out
+}
+
+/// Render plain text (possibly with blank-line paragraphs) as XHTML paragraphs.
+pub fn text_to_paragraphs(text: &str) -> String {
+    text.split("\n\n")
+        .map(str::trim)
+        .filter(|p| !p.is_empty())
+        .map(|p| format!("<p>{}</p>", escape_html(&p.replace('\n', " "))))
+        .collect::<Vec<_>>()
+        .join("\n")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn html_becomes_readable_text() {
+        let html = "<h1>Title</h1><p>First &amp; best.</p><script>alert('x')</script>\
+                    <p>Second<br/>line</p><style>p{color:red}</style>";
+        assert_eq!(html_to_text(html), "Title First & best. Second line");
+        assert_eq!(html_to_text(""), "");
+        assert_eq!(html_to_text("no markup at all"), "no markup at all");
+        // Unicode survives byte-wise walking.
+        assert_eq!(html_to_text("<p>café — naïve</p>"), "café — naïve");
+    }
+
+    #[test]
+    fn word_and_token_truncation() {
+        assert_eq!(truncate_words("one two three", 5), "one two three");
+        assert_eq!(truncate_words("one two three", 2), "one two…");
+        let long = "word ".repeat(1000);
+        // 10 tokens ≈ 40 characters, cut back to a word boundary, plus the ellipsis.
+        let cut = truncate_tokens(&long, 10);
+        assert!(cut.len() <= 43, "{}", cut.len());
+        assert!(cut.split_whitespace().count() <= 10);
+        assert!(cut.ends_with('…'));
+        assert_eq!(truncate_tokens("short", 10), "short");
+        assert!(approx_tokens("abcd") <= 1);
+    }
+
+    #[test]
+    fn escaping_and_paragraphs() {
+        assert_eq!(escape_html("a<b>&'\""), "a&lt;b&gt;&amp;&#39;&quot;");
+        assert_eq!(
+            text_to_paragraphs("One\nline.\n\nTwo <b>."),
+            "<p>One line.</p>\n<p>Two &lt;b&gt;.</p>"
+        );
+        assert_eq!(text_to_paragraphs("   "), "");
+    }
+}
diff --git a/src/curate/prefilter.rs b/src/curate/prefilter.rs
new file mode 100644
index 0000000..e91215f
--- /dev/null
+++ b/src/curate/prefilter.rs
@@ -0,0 +1,665 @@
+//! Heuristic pre-filter: 300–500 articles → ~120 candidates (spec §3.5).
+//!
+//! Pure Rust and free: this is what keeps LLM cost flat as feed volume grows.
+//!
+//! The 0–100 score is a sum of bounded components so that no single signal can
+//! dominate, and every component is monotonic in its input:
+//!
+//! | component | range | source |
+//! |---|---|---|
+//! | long-form word count | 0 … +35 | §3.5 "0 pts <300 words, max at ~2500+" |
+//! | social proof | 0 … +25 | §3.4 composite, log-scaled again |
+//! | came via Scour | +8 | §3.5 (already matched a stated interest) |
+//! | came via HN frontpage | +8 | §3.5 |
+//! | carried by several feeds | 0 … +8 | §3.2 (multi-source *is* social proof) |
+//! | feed prior | −12 … +12 | §3.9 beta-smoothed upvote rate, neutral at 0.5 |
+//! | excerpt only | −20 | §3.5 (penalized, never banned — §7) |
+//! | roundup/release-notes title | −15 | §3.5 |
+//! | blocked domain | excluded | §3.5 |
+
+use std::collections::{HashMap, HashSet};
+
+use crate::config::{Config, CurationConfig};
+use crate::types::{Article, ArticleId, FeedId, FeedPrior, ScoredArticle, SourceKind};
+
+/// Title patterns that mark low-effort posts: link roundups, release notes,
+/// sponsor posts (§3.5).
+pub const PENALTY_TITLE_PATTERNS: &[&str] = &[
+    "link roundup",
+    "links for",
+    "weekly digest",
+    "release notes",
+    "changelog",
+    "sponsored",
+    "this week in",
+    "linkdump",
+    "link dump",
+    "weekly roundup",
+    "roundup:",
+    "in case you missed it",
+    "what we're reading",
+    "sponsor post",
+    "now available",
+    "is now generally available",
+    "release candidate",
+    "patch notes",
+    "job board",
+    "who's hiring",
+    "newsletter #",
+    "digest #",
+];
+
+/// Word count at which the long-form bonus saturates (§3.5).
+pub const LONGFORM_SATURATION_WORDS: i64 = 2500;
+/// Below this word count the long-form bonus is zero (§3.5).
+pub const LONGFORM_FLOOR_WORDS: i64 = 300;
+/// Articles the LLM scored below this within the last week are not re-scored (§3.5).
+pub const STALE_LOW_SCORE: f64 = 3.0;
+/// Lookback for the "don't re-score churn" rule (§3.5).
+pub const STALE_LOOKBACK_DAYS: i64 = 7;
+
+/// Maximum contribution of each scoring component (§3.5).
+pub const MAX_LONGFORM_POINTS: f64 = 35.0;
+pub const MAX_SOCIAL_POINTS: f64 = 25.0;
+pub const SCOUR_BONUS: f64 = 8.0;
+pub const HN_FRONTPAGE_BONUS: f64 = 8.0;
+pub const MAX_MULTI_SOURCE_POINTS: f64 = 8.0;
+pub const MAX_FEED_PRIOR_POINTS: f64 = 12.0;
+pub const EXCERPT_ONLY_PENALTY: f64 = 20.0;
+pub const ROUNDUP_TITLE_PENALTY: f64 = 15.0;
+
+/// `composite_social_score` value that earns the full social bonus. Empirically
+/// ~6.0 is a 1,000-point HN story with 500 comments (§3.4 formula).
+const SOCIAL_SATURATION: f64 = 6.0;
+
+/// Everything the pre-filter needs beyond the articles themselves (§3.5, §3.9).
+#[derive(Debug, Clone, Default)]
+pub struct PrefilterContext {
+    /// Per-feed Bayesian upvote rate from ratings history (§3.9).
+    pub feed_priors: HashMap<FeedId, FeedPrior>,
+    /// Article ids already published in a previous issue (§3.5).
+    pub already_published: Vec<ArticleId>,
+    /// Article ids the LLM scored < [`STALE_LOW_SCORE`] recently (§3.5).
+    pub recently_rejected: Vec<ArticleId>,
+}
+
+impl PrefilterContext {
+    /// Load the history/priors context from SQLite (§3.5 dedup-vs-history, §3.9).
+    ///
+    /// `today` anchors the [`STALE_LOOKBACK_DAYS`] window.
+    pub async fn load(
+        db: &crate::db::Db,
+        today: jiff::civil::Date,
+    ) -> Result<Self, crate::db::DbError> {
+        let since = today
+            .checked_sub(jiff::Span::new().days(STALE_LOOKBACK_DAYS))
+            .unwrap_or(today);
+        let feed_priors = db
+            .feed_priors()
+            .await?
+            .into_iter()
+            .map(|p| (p.feed_id, p))
+            .collect();
+        let already_published = db.previously_published_ids().await?;
+        let recently_rejected = db.recently_low_scored_ids(STALE_LOW_SCORE, since).await?;
+        tracing::debug!(
+            priors = ?feed_priors_len(&feed_priors),
+            published = already_published.len(),
+            rejected = recently_rejected.len(),
+            "loaded prefilter context"
+        );
+        Ok(Self {
+            feed_priors,
+            already_published,
+            recently_rejected,
+        })
+    }
+
+    fn prior_for(&self, article: &Article) -> f64 {
+        // The cluster's feeds are all candidates; take the most favourable one,
+        // since a story carried by a well-rated feed is a better bet.
+        let mut best = self.feed_priors.get(&article.feed_id).map(FeedPrior::rate);
+        for source in &article.sources {
+            if let Some(p) = self.feed_priors.get(&source.feed_id) {
+                let rate = p.rate();
+                best = Some(best.map_or(rate, |b: f64| b.max(rate)));
+            }
+        }
+        best.unwrap_or(0.5)
+    }
+}
+
+fn feed_priors_len(m: &HashMap<FeedId, FeedPrior>) -> usize {
+    m.len()
+}
+
+/// True when the article's feed is in `curation.always_include_feeds` (§3.5).
+///
+/// Entries are matched either as a Miniflux feed id (any feed in the cluster) or
+/// as a case-insensitive substring of the article/site URL.
+///
+/// Auto-includes are still LLM-scored (for section + summary) but can't be dropped.
+pub fn is_auto_include(article: &Article, cfg: &CurationConfig) -> bool {
+    if cfg.always_include_feeds.is_empty() {
+        return false;
+    }
+    let url = article.url.to_lowercase();
+    let canonical = article.canonical_url.to_lowercase();
+    cfg.always_include_feeds.iter().any(|raw| {
+        let needle = raw.trim();
+        if needle.is_empty() {
+            return false;
+        }
+        if let Ok(id) = needle.parse::<FeedId>()
+            && (article.feed_id == id || article.sources.iter().any(|s| s.feed_id == id))
+        {
+            return true;
+        }
+        let needle = needle.to_lowercase();
+        // Bare host or full site URL: compare against both URLs we hold.
+        let needle = needle
+            .trim_start_matches("https://")
+            .trim_start_matches("http://")
+            .trim_end_matches('/');
+        !needle.is_empty() && (url.contains(needle) || canonical.contains(needle))
+    })
+}
+
+/// True when the article's host matches `curation.blocked_domains` (§3.5).
+pub fn is_blocked(article: &Article, cfg: &CurationConfig) -> bool {
+    if cfg.blocked_domains.is_empty() {
+        return false;
+    }
+    let host = host_of(&article.canonical_url)
+        .or_else(|| host_of(&article.url))
+        .unwrap_or_default();
+    if host.is_empty() {
+        return false;
+    }
+    cfg.blocked_domains.iter().any(|raw| {
+        let blocked = raw.trim().trim_start_matches('.').to_lowercase();
+        !blocked.is_empty() && (host == blocked || host.ends_with(&format!(".{blocked}")))
+    })
+}
+
+/// Lowercased host of a URL, `www.` stripped.
+fn host_of(url: &str) -> Option<String> {
+    let rest = url
+        .split_once("://")
+        .map(|(_, rest)| rest)
+        .unwrap_or(url)
+        .split(['/', '?', '#'])
+        .next()?;
+    let host = rest.rsplit_once('@').map(|(_, h)| h).unwrap_or(rest);
+    let host = host.split_once(':').map(|(h, _)| h).unwrap_or(host);
+    let host = host.trim().to_lowercase();
+    if host.is_empty() {
+        None
+    } else {
+        Some(host.trim_start_matches("www.").to_string())
+    }
+}
+
+/// True when the title reads like a link roundup / release note / sponsor post (§3.5).
+pub fn looks_like_roundup(title: &str) -> bool {
+    let lower = title.to_lowercase();
+    PENALTY_TITLE_PATTERNS
+        .iter()
+        .any(|pattern| lower.contains(pattern))
+}
+
+/// Long-form bonus: zero below [`LONGFORM_FLOOR_WORDS`], saturating at
+/// [`LONGFORM_SATURATION_WORDS`], with a concave curve so that the jump from a
+/// 400-word note to a 1,200-word piece matters more than 2,000 → 2,500 (§3.5).
+pub fn longform_points(word_count: i64) -> f64 {
+    let span = (LONGFORM_SATURATION_WORDS - LONGFORM_FLOOR_WORDS) as f64;
+    let over = (word_count - LONGFORM_FLOOR_WORDS).max(0) as f64;
+    MAX_LONGFORM_POINTS * (over / span).min(1.0).powf(0.65)
+}
+
+/// Social proof, log-scaled a second time so that a viral story cannot swamp the
+/// long-form preference (§3.4, §3.5).
+pub fn social_points(social_score: f64) -> f64 {
+    if social_score <= 0.0 {
+        return 0.0;
+    }
+    MAX_SOCIAL_POINTS * (social_score / SOCIAL_SATURATION).min(1.0).sqrt()
+}
+
+/// Score one article 0–100 from word count, social proof, source signals, feed
+/// prior, and the excerpt/roundup/blocklist penalties (§3.5).
+pub fn score_article(article: &Article, ctx: &PrefilterContext, cfg: &Config) -> f64 {
+    if is_blocked(article, &cfg.curation) {
+        return 0.0;
+    }
+    let mut score = longform_points(article.word_count);
+    score += social_points(article.social_score());
+
+    if article.came_via(SourceKind::Scour) {
+        score += SCOUR_BONUS;
+    }
+    if article.came_via(SourceKind::HnFrontpage) {
+        score += HN_FRONTPAGE_BONUS;
+    }
+
+    let extra_feeds = article.sources.len().saturating_sub(1) as f64;
+    score += (extra_feeds * 4.0).min(MAX_MULTI_SOURCE_POINTS);
+
+    // Beta-smoothed upvote rate, neutral (0.5) contributing nothing (§3.9).
+    score += (ctx.prior_for(article) - 0.5) * 2.0 * MAX_FEED_PRIOR_POINTS;
+
+    if article.excerpt_only {
+        score -= EXCERPT_ONLY_PENALTY;
+    }
+    if looks_like_roundup(&article.title) {
+        score -= ROUNDUP_TITLE_PENALTY;
+    }
+
+    score.clamp(0.0, 100.0)
+}
+
+/// Apply [`score_article`] to everything, drop history duplicates, then keep the
+/// top `prefilter_keep` plus every auto-include (§3.5).
+pub fn run(articles: Vec<Article>, ctx: &PrefilterContext, cfg: &Config) -> Vec<ScoredArticle> {
+    let published: HashSet<ArticleId> = ctx.already_published.iter().copied().collect();
+    let rejected: HashSet<ArticleId> = ctx.recently_rejected.iter().copied().collect();
+
+    let total = articles.len();
+    let (mut dropped_history, mut dropped_blocked) = (0usize, 0usize);
+    let mut scored: Vec<ScoredArticle> = Vec::with_capacity(total);
+
+    for article in articles {
+        let auto_include = is_auto_include(&article, &cfg.curation);
+
+        // Never print the same story twice, not even from an always-include feed.
+        if published.contains(&article.id) {
+            dropped_history += 1;
+            continue;
+        }
+        // "Don't re-score churn" (§3.5) — but an always-include feed still gets in.
+        if !auto_include && rejected.contains(&article.id) {
+            dropped_history += 1;
+            continue;
+        }
+        if !auto_include && is_blocked(&article, &cfg.curation) {
+            dropped_blocked += 1;
+            continue;
+        }
+
+        let prefilter_score = score_article(&article, ctx, cfg);
+        let social_score = article.social_score();
+        let feed_prior = ctx.prior_for(&article);
+        scored.push(ScoredArticle {
+            article,
+            prefilter_score,
+            social_score,
+            feed_prior,
+            llm: None,
+            auto_include,
+        });
+    }
+
+    // Descending by score; ties broken by word count then id so the order is
+    // deterministic across runs (notes §12).
+    sort_by_prefilter(&mut scored);
+
+    let keep = cfg.prefilter_keep.max(cfg.target_article_count);
+    let kept: Vec<ScoredArticle> = if scored.len() <= keep {
+        scored
+    } else {
+        let (head, tail) = scored.split_at(keep);
+        let mut kept = head.to_vec();
+        // Auto-includes below the cut are pulled back in — they can't be dropped.
+        kept.extend(tail.iter().filter(|s| s.auto_include).cloned());
+        sort_by_prefilter(&mut kept);
+        kept
+    };
+
+    tracing::info!(
+        input = total,
+        kept = kept.len(),
+        auto_includes = kept.iter().filter(|s| s.auto_include).count(),
+        dropped_history,
+        dropped_blocked,
+        "pre-filter complete"
+    );
+    kept
+}
+
+/// Deterministic ranking: score desc, then longer, then lowest id (notes §12).
+pub fn sort_by_prefilter(scored: &mut [ScoredArticle]) {
+    scored.sort_by(|a, b| {
+        b.prefilter_score
+            .partial_cmp(&a.prefilter_score)
+            .unwrap_or(std::cmp::Ordering::Equal)
+            .then_with(|| b.article.word_count.cmp(&a.article.word_count))
+            .then_with(|| a.article.id.cmp(&b.article.id))
+    });
+}
+
+#[cfg(test)]
+pub(crate) mod tests {
+    use super::*;
+    use crate::types::{ExtractMethod, SocialRef, SocialSource, SourceRef};
+    use jiff::Timestamp;
+
+    pub(crate) fn ts() -> Timestamp {
+        "2026-08-15T05:30:00Z"
+            .parse()
+            .expect("static timestamp parses")
+    }
+
+    /// A plain 800-word article from feed 7 with no social proof.
+    pub(crate) fn article(id: ArticleId, title: &str, word_count: i64) -> Article {
+        Article {
+            id,
+            canonical_url: format!("https://example.com/{id}"),
+            title: title.into(),
+            best_entry_id: 1000 + id,
+            content_html: format!("<p>{}</p>", "word ".repeat(word_count.max(0) as usize)),
+            word_count,
+            excerpt_only: false,
+            image_count: 0,
+            sources: vec![SourceRef {
+                entry_id: 1000 + id,
+                feed_id: 7,
+                feed_title: "Some Blog".into(),
+                category: Some("Tech".into()),
+                kind: SourceKind::Feed,
+            }],
+            first_seen: ts(),
+            url: format!("https://example.com/{id}"),
+            author: Some("A. Writer".into()),
+            feed_id: 7,
+            feed_title: "Some Blog".into(),
+            category: Some("Tech".into()),
+            published_at: Some(ts()),
+            comments_url: None,
+            image_urls: vec![],
+            social: vec![],
+            extract_method: ExtractMethod::Readability,
+        }
+    }
+
+    pub(crate) fn with_social(mut a: Article, points: i64, comments: i64) -> Article {
+        a.social = vec![SocialRef {
+            article_id: a.id,
+            source: SocialSource::Hn,
+            item_id: Some("1".into()),
+            score: points,
+            num_comments: comments,
+            item_url: Some("https://news.ycombinator.com/item?id=1".into()),
+            fetched_at: ts(),
+        }];
+        a
+    }
+
+    pub(crate) fn via(mut a: Article, kind: SourceKind, feed_id: FeedId) -> Article {
+        a.sources.push(SourceRef {
+            entry_id: a.best_entry_id,
+            feed_id,
+            feed_title: format!("{kind:?} feed"),
+            category: None,
+            kind,
+        });
+        a
+    }
+
+    fn cfg() -> Config {
+        Config {
+            prefilter_keep: 3,
+            target_article_count: 2,
+            ..Config::default()
+        }
+    }
+
+    #[test]
+    fn longform_curve_is_monotonic_and_bounded() {
+        assert_eq!(longform_points(0), 0.0);
+        assert_eq!(longform_points(LONGFORM_FLOOR_WORDS), 0.0);
+        let mut prev = -1.0;
+        for wc in [0, 100, 299, 300, 500, 900, 1500, 2200, 2500, 9000] {
+            let pts = longform_points(wc);
+            assert!(pts >= prev, "not monotonic at {wc}");
+            assert!(pts <= MAX_LONGFORM_POINTS);
+            prev = pts;
+        }
+        assert!((longform_points(2500) - MAX_LONGFORM_POINTS).abs() < 1e-9);
+        assert!((longform_points(50_000) - MAX_LONGFORM_POINTS).abs() < 1e-9);
+    }
+
+    #[test]
+    fn social_curve_is_monotonic_and_bounded() {
+        let mut prev = -1.0;
+        for s in [0.0, 0.5, 1.0, 2.0, 4.0, 6.0, 20.0] {
+            let pts = social_points(s);
+            assert!(pts >= prev);
+            assert!(pts <= MAX_SOCIAL_POINTS);
+            prev = pts;
+        }
+        assert_eq!(social_points(0.0), 0.0);
+        assert!((social_points(6.0) - MAX_SOCIAL_POINTS).abs() < 1e-9);
+    }
+
+    #[test]
+    fn score_rises_with_length_and_social_proof() {
+        let (ctx, cfg) = (PrefilterContext::default(), cfg());
+        let short = score_article(&article(1, "A thought", 200), &ctx, &cfg);
+        let medium = score_article(&article(2, "An essay", 1200), &ctx, &cfg);
+        let long = score_article(&article(3, "A treatise", 3000), &ctx, &cfg);
+        assert!(short < medium, "{short} !< {medium}");
+        assert!(medium < long, "{medium} !< {long}");
+
+        let quiet = score_article(&article(4, "An essay", 1200), &ctx, &cfg);
+        let loud = score_article(
+            &with_social(article(5, "An essay", 1200), 400, 250),
+            &ctx,
+            &cfg,
+        );
+        assert!(loud > quiet);
+        assert!(loud <= 100.0);
+    }
+
+    #[test]
+    fn source_bonuses_and_penalties_apply() {
+        let (ctx, cfg) = (PrefilterContext::default(), cfg());
+        // Long enough that the penalties do not run into the 0 floor.
+        let plain = score_article(&article(1, "Deep dive", 3000), &ctx, &cfg);
+        assert!(plain > EXCERPT_ONLY_PENALTY);
+
+        let scoured = score_article(
+            &via(article(2, "Deep dive", 3000), SourceKind::Scour, 42),
+            &ctx,
+            &cfg,
+        );
+        // Scour bonus + one extra feed in the cluster.
+        assert!(scoured > plain + SCOUR_BONUS - 0.001);
+
+        let mut excerpt = article(3, "Deep dive", 3000);
+        excerpt.excerpt_only = true;
+        assert!(
+            (score_article(&excerpt, &ctx, &cfg) - (plain - EXCERPT_ONLY_PENALTY)).abs() < 1e-9
+        );
+
+        let roundup = article(4, "This Week in Rust #612", 3000);
+        assert!(looks_like_roundup(&roundup.title));
+        assert!(
+            (score_article(&roundup, &ctx, &cfg) - (plain - ROUNDUP_TITLE_PENALTY)).abs() < 1e-9
+        );
+    }
+
+    #[test]
+    fn feed_prior_moves_the_score_both_ways() {
+        let cfg = cfg();
+        let mut liked = PrefilterContext::default();
+        liked.feed_priors.insert(
+            7,
+            FeedPrior {
+                feed_id: 7,
+                upvotes: 18,
+                downvotes: 0,
+                included: 18,
+            },
+        );
+        let mut disliked = PrefilterContext::default();
+        disliked.feed_priors.insert(
+            7,
+            FeedPrior {
+                feed_id: 7,
+                upvotes: 0,
+                downvotes: 18,
+                included: 18,
+            },
+        );
+        let a = article(1, "Deep dive", 1200);
+        let neutral = score_article(&a, &PrefilterContext::default(), &cfg);
+        assert!(score_article(&a, &liked, &cfg) > neutral);
+        assert!(score_article(&a, &disliked, &cfg) < neutral);
+    }
+
+    #[test]
+    fn blocked_domains_and_auto_includes_match_urls_and_ids() {
+        let mut cfg = cfg();
+        cfg.curation.blocked_domains = vec!["spam.example".into()];
+        cfg.curation.always_include_feeds = vec!["99".into(), "tyler.blog".into()];
+
+        let mut blocked = article(1, "Buy now", 1200);
+        blocked.canonical_url = "https://news.spam.example/post".into();
+        blocked.url.clone_from(&blocked.canonical_url);
+        assert!(is_blocked(&blocked, &cfg.curation));
+        assert_eq!(
+            score_article(&blocked, &PrefilterContext::default(), &cfg),
+            0.0
+        );
+
+        let mut by_url = article(2, "A rare post", 900);
+        by_url.url = "https://tyler.blog/2026/rare".into();
+        assert!(is_auto_include(&by_url, &cfg.curation));
+
+        let mut by_id = article(3, "Another rare post", 900);
+        by_id.feed_id = 99;
+        assert!(is_auto_include(&by_id, &cfg.curation));
+
+        assert!(!is_auto_include(&article(4, "Normal", 900), &cfg.curation));
+    }
+
+    #[test]
+    fn keeps_top_n_plus_auto_includes_and_drops_history() {
+        let mut cfg = cfg();
+        cfg.prefilter_keep = 2;
+        cfg.curation.always_include_feeds = vec!["99".into()];
+
+        let mut auto = article(5, "A short personal note", 120);
+        auto.feed_id = 99;
+
+        let articles = vec![
+            article(1, "Long treatise", 4000),
+            article(2, "Medium essay", 1500),
+            article(3, "Shorter piece", 700),
+            article(4, "Already printed", 5000),
+            auto,
+            article(6, "Rejected yesterday", 3000),
+        ];
+        let ctx = PrefilterContext {
+            already_published: vec![4],
+            recently_rejected: vec![6],
+            ..PrefilterContext::default()
+        };
+
+        let kept = run(articles, &ctx, &cfg);
+        let ids: Vec<ArticleId> = kept.iter().map(|s| s.article.id).collect();
+        assert!(!ids.contains(&4), "previously published must be dropped");
+        assert!(!ids.contains(&6), "recently rejected must be dropped");
+        assert!(ids.contains(&5), "auto-include survives below the cut");
+        assert!(ids.contains(&1) && ids.contains(&2));
+        assert!(!ids.contains(&3), "cut at prefilter_keep");
+        assert_eq!(kept.len(), 3); // 2 kept + 1 auto-include
+
+        // Sorted by score, descending.
+        for pair in kept.windows(2) {
+            assert!(pair[0].prefilter_score >= pair[1].prefilter_score);
+        }
+        assert!(
+            kept.iter()
+                .find(|s| s.article.id == 5)
+                .is_some_and(|s| s.auto_include)
+        );
+    }
+
+    #[test]
+    fn auto_include_survives_the_recently_rejected_list_but_not_republication() {
+        let mut cfg = cfg();
+        cfg.curation.always_include_feeds = vec!["99".into()];
+        let mut a = article(1, "Personal note", 200);
+        a.feed_id = 99;
+        let mut b = article(2, "Personal note two", 200);
+        b.feed_id = 99;
+
+        let ctx = PrefilterContext {
+            recently_rejected: vec![1],
+            already_published: vec![2],
+            ..PrefilterContext::default()
+        };
+        let kept = run(vec![a, b], &ctx, &cfg);
+        let ids: Vec<ArticleId> = kept.iter().map(|s| s.article.id).collect();
+        assert_eq!(ids, vec![1]);
+    }
+
+    #[tokio::test]
+    async fn context_loads_history_from_sqlite() {
+        let dir = tempfile::tempdir().expect("tempdir");
+        let db = crate::db::Db::open_and_migrate(&dir.path().join("t.db"))
+            .await
+            .expect("db");
+        let date: jiff::civil::Date = "2026-08-15".parse().expect("date");
+
+        db.upsert_feed_prior(&FeedPrior {
+            feed_id: 7,
+            upvotes: 4,
+            downvotes: 1,
+            included: 5,
+        })
+        .await
+        .expect("prior");
+        sqlx::query(
+            "INSERT INTO articles (id, canonical_url, title, first_seen) VALUES
+                 (42, 'https://example.com/42', 'Printed', '2026-08-14T00:00:00Z'),
+                 (43, 'https://example.com/43', 'Rejected', '2026-08-14T00:00:00Z'),
+                 (44, 'https://example.com/44', 'Ancient', '2020-01-01T00:00:00Z')",
+        )
+        .execute(db.pool())
+        .await
+        .expect("articles");
+        db.upsert_issue(
+            "2026-08-14".parse().expect("date"),
+            1,
+            ts(),
+            None,
+            None,
+            None,
+            None,
+            None,
+        )
+        .await
+        .expect("issue");
+        sqlx::query(
+            "INSERT INTO issue_articles (issue_date, article_id, section, position, is_lead)
+             VALUES ('2026-08-14', 42, 'Top Stories', 1, 0)",
+        )
+        .execute(db.pool())
+        .await
+        .expect("issue article");
+        sqlx::query(
+            "INSERT INTO scores (article_id, run_date, llm_score) VALUES (43, '2026-08-14', 1.5),
+                                                                        (44, '2020-01-01', 1.0)",
+        )
+        .execute(db.pool())
+        .await
+        .expect("scores");
+
+        let ctx = PrefilterContext::load(&db, date).await.expect("context");
+        assert_eq!(ctx.already_published, vec![42]);
+        assert_eq!(ctx.recently_rejected, vec![43], "old rejects age out");
+        assert!((ctx.feed_priors[&7].rate() - 5.0 / 7.0).abs() < 1e-12);
+    }
+}
diff --git a/src/curate/profile.rs b/src/curate/profile.rs
new file mode 100644
index 0000000..162b6f9
--- /dev/null
+++ b/src/curate/profile.rs
@@ -0,0 +1,1116 @@
+//! Taste profile construction (spec §3.6, §3.9).
+//!
+//! A ~600-word document assembled from (a) the interest names parsed out of
+//! `data/scour-interests.opml`, grouped into themes, (b) hard-coded stated
+//! preferences, and (c) a "learned adjustments" section regenerated weekly from
+//! recent 👍/👎 ratings. Stored and versioned in `kv`.
+//!
+//! This document is the **system prompt** for every DeepSeek call in the run, so
+//! it must be byte-identical between requests: DeepSeek's automatic prefix cache
+//! is what makes the whole pipeline cost cents rather than dollars (§3.6).
+
+use std::collections::BTreeSet;
+use std::fmt::Write as _;
+use std::path::Path;
+
+use anyhow::Context as _;
+use jiff::Timestamp;
+use jiff::civil::Date;
+use serde::{Deserialize, Serialize};
+use sqlx::Row as _;
+
+use super::llm::LlmClient;
+use crate::db::{Db, KV_PROFILE_VERSION, KV_TASTE_PROFILE};
+use crate::types::{TasteProfile, Vote};
+
+/// Rebuild cadence for the learned-adjustments section (§3.6).
+pub const REBUILD_INTERVAL_DAYS: i64 = 7;
+/// Ratings lookback used when rewriting learned adjustments (§3.9).
+pub const RATINGS_LOOKBACK_DAYS: i64 = 90;
+/// `kv` key holding just the learned-adjustments block, so that re-parsing the
+/// OPML never loses what the ratings taught us (§3.6).
+pub const KV_LEARNED_ADJUSTMENTS: &str = "taste_profile_learned";
+/// Ratings fed to one rebuild call.
+const MAX_RATINGS_IN_PROMPT: usize = 400;
+
+/// Hard-coded stated preferences from the reader profile (spec §1).
+pub const STATED_PREFERENCES: &str = "\
+Prefers long-form, high-effort, well-written articles on any topic. Uses social \
+proof (HN/Reddit/Lobsters upvotes and comment counts) as a quality proxy. Wants \
+tech news, light general/US world news (Wikipedia Current Events style, neutral), \
+Boston-area news, and ultra-niche community news.";
+
+/// Placeholder used until the first ratings arrive (§3.6c).
+pub const NO_LEARNED_ADJUSTMENTS: &str = "No reader ratings have been collected yet. Judge purely on the stated \
+     preferences and interests above.";
+
+// ---------------------------------------------------------------------------
+// OPML parsing (§3.6a)
+// ---------------------------------------------------------------------------
+
+/// Parse interest names out of the Scour OPML (§3.6).
+///
+/// The file is one long line of `<outline type="rss" text="Rust" …/>` elements;
+/// we take every `text` attribute, XML-unescape it, trim it, and de-duplicate
+/// case-insensitively (the export contains both `Self-hosting` and
+/// `Self-Hosting`). Order follows the document so the result is deterministic.
+pub fn parse_interests(opml_path: &Path) -> anyhow::Result<Vec<String>> {
+    let raw = std::fs::read_to_string(opml_path)
+        .with_context(|| format!("reading the interests OPML at {}", opml_path.display()))?;
+    let interests = parse_interests_str(&raw);
+    if interests.is_empty() {
+        anyhow::bail!(
+            "no <outline text=\"…\"> interests found in {}",
+            opml_path.display()
+        );
+    }
+    tracing::debug!(count = interests.len(), "parsed scour interests");
+    Ok(interests)
+}
+
+/// [`parse_interests`] over an in-memory document (also the unit-test seam).
+pub fn parse_interests_str(raw: &str) -> Vec<String> {
+    let mut seen: BTreeSet<String> = BTreeSet::new();
+    let mut out = Vec::new();
+    for chunk in raw.split("text=\"").skip(1) {
+        let Some((value, _)) = chunk.split_once('"') else {
+            continue;
+        };
+        let name = xml_unescape(value).trim().to_string();
+        if name.is_empty() {
+            continue;
+        }
+        if seen.insert(name.to_lowercase()) {
+            out.push(name);
+        }
+    }
+    out
+}
+
+fn xml_unescape(s: &str) -> String {
+    if !s.contains('&') {
+        return s.to_string();
+    }
+    s.replace("&lt;", "<")
+        .replace("&gt;", ">")
+        .replace("&quot;", "\"")
+        .replace("&apos;", "'")
+        .replace("&#39;", "'")
+        .replace("&amp;", "&")
+}
+
+// ---------------------------------------------------------------------------
+// Theming (§3.6a)
+// ---------------------------------------------------------------------------
+
+/// Theme name → lowercase keywords, in priority order. The first theme whose
+/// keyword appears in the interest name wins, so the table is ordered from the
+/// most specific bucket to the most general.
+const THEMES: &[(&str, &[&str])] = &[
+    (
+        "Systems & languages",
+        &[
+            "rust",
+            "zig",
+            "lua",
+            "assembly",
+            "compiler",
+            "systems programming",
+            "concurrency",
+            "async",
+            "memory",
+            "simd",
+            "zero-copy",
+            "parser",
+            "fuzz",
+            "static analysis",
+            "functional programming",
+            "data structures",
+            "algorithm",
+            "performance",
+            "profil",
+            "python",
+            "typescript",
+            "node.js",
+            "wasm",
+            "webassembly",
+            "reactive programming",
+            "lsp",
+        ],
+    ),
+    (
+        "Databases & data",
+        &[
+            "database",
+            "sql",
+            "postgres",
+            "query",
+            "vector databases",
+            "bloom",
+            "compression",
+            "data engineering",
+            "knowledge graph",
+            "message queue",
+            "distributed systems",
+            "crdt",
+            "microservices",
+            "system design",
+        ],
+    ),
+    (
+        "AI & machine learning",
+        &[
+            "ai",
+            "llm",
+            "machine learning",
+            "nlp",
+            "rag",
+            "prompt",
+            "agent",
+            "claude",
+            "eval",
+        ],
+    ),
+    (
+        "Web, infra & devtools",
+        &[
+            "web",
+            "css",
+            "htmx",
+            "svelte",
+            "react",
+            "pwa",
+            "api",
+            "developer",
+            "devops",
+            "docker",
+            "git",
+            "observability",
+            "cloud",
+            "cdn",
+            "edge",
+            "networking",
+            "mesh",
+            "ipfs",
+            "activitypub",
+            "atproto",
+            "search engines",
+            "tauri",
+            "design systems",
+            "cybersecurity",
+            "cryptography",
+            "monitoring",
+            "spatial computing",
+            "webrtc",
+            "webgpu",
+            "webgl",
+            "webcodecs",
+            "android",
+            "mobile",
+            "code generation",
+        ],
+    ),
+    (
+        "Self-hosting, RSS & the indie web",
+        &[
+            "self-host",
+            "self host",
+            "homelab",
+            "rss",
+            "feed reader",
+            "indie web",
+            "personal website",
+            "personal wiki",
+            "digital garden",
+            "static site",
+            "static sites",
+            "personal archiving",
+            "offline-first",
+            "privacy",
+            "open source",
+            "licensing",
+            "side projects",
+            "digital nomad",
+            "remote living",
+            "off-grid",
+            "quantified self",
+            "cloudflare workers",
+        ],
+    ),
+    (
+        "E-ink, terminals & hardware",
+        &[
+            "e-ink",
+            "eink",
+            "writerdeck",
+            "tmux",
+            "neovim",
+            "terminal",
+            "text editor",
+            "editor",
+            "window manager",
+            "keyboard",
+            "hardware",
+            "electronics",
+            "calibre",
+            "ghostty",
+            "retro computing",
+            "low-tech",
+            "manufacturing",
+            "typography",
+            "linux",
+        ],
+    ),
+    (
+        "Games & interactive fiction",
+        &[
+            "game",
+            "gaming",
+            "minecraft",
+            "mud",
+            "interactive fiction",
+            "inform7",
+            "bevy",
+            "sim racing",
+            "modding",
+        ],
+    ),
+    (
+        "Creative coding & digital art",
+        &[
+            "generative",
+            "creative coding",
+            "creative automation",
+            "glitch",
+            "procedural",
+            "digital art",
+            "gaussian splatting",
+            "cellular automata",
+            "sonification",
+            "code visualization",
+            "photo",
+            "photography",
+            "agent-based",
+        ],
+    ),
+    (
+        "Writing, books & PKM",
+        &[
+            "writing",
+            "write",
+            "reading",
+            "book",
+            "essay",
+            "poetry",
+            "literature",
+            "note-taking",
+            "journaling",
+            "pkm",
+            "knowledge management",
+            "obsidian",
+            "markdown",
+            "commonplace",
+            "longform",
+            "long-form",
+            "fiction",
+            "worldbuilding",
+            "sci-fi",
+            "science fiction",
+            "speculative",
+            "podcast",
+            "narrative",
+            "choice architecture",
+        ],
+    ),
+    (
+        "Science, space & nature",
+        &[
+            "space",
+            "aerospace",
+            "aviation",
+            "science",
+            "neuroscience",
+            "bioinformatics",
+            "nature",
+            "cognitive",
+            "social science",
+        ],
+    ),
+    (
+        "History, policy & culture",
+        &[
+            "history",
+            "policy",
+            "culture",
+            "lgbt",
+            "queer",
+            "startups",
+            "apple",
+            "boston",
+            "criticism",
+            "internet history",
+            "computing history",
+        ],
+    ),
+    (
+        "Outdoors, coffee & everyday life",
+        &[
+            "hiking",
+            "camping",
+            "running",
+            "trail",
+            "coffee",
+            "cats",
+            "films",
+            "music",
+            "engineering",
+        ],
+    ),
+];
+
+/// Fallback bucket for interests no keyword claims.
+const OTHER_THEME: &str = "Other standing interests";
+
+/// Group ~220 interests into readable themes for the prompt (§3.6).
+///
+/// Deterministic: theme order follows [`THEMES`], members are sorted
+/// case-insensitively, and empty themes are omitted.
+pub fn group_into_themes(interests: &[String]) -> Vec<(String, Vec<String>)> {
+    let mut buckets: Vec<Vec<String>> = vec![Vec::new(); THEMES.len() + 1];
+    for interest in interests {
+        let lower = interest.to_lowercase();
+        let idx = THEMES
+            .iter()
+            .position(|(_, keywords)| keywords.iter().any(|k| lower.contains(k)))
+            .unwrap_or(THEMES.len());
+        buckets[idx].push(interest.clone());
+    }
+    let mut out = Vec::new();
+    for (idx, mut members) in buckets.into_iter().enumerate() {
+        if members.is_empty() {
+            continue;
+        }
+        members.sort_by_key(|m| (m.to_lowercase(), m.clone()));
+        let name = THEMES.get(idx).map(|(n, _)| *n).unwrap_or(OTHER_THEME);
+        out.push((name.to_string(), members));
+    }
+    out
+}
+
+// ---------------------------------------------------------------------------
+// Document assembly (§3.6)
+// ---------------------------------------------------------------------------
+
+/// The invariant part of the profile: who the reader is and how to judge for him.
+/// Kept as one constant so the prompt bytes never drift between calls (§3.6).
+const PROFILE_PREAMBLE: &str = "\
+You are the editor-in-chief of *The Daily EPUB*, a personal morning newspaper \
+assembled every day for exactly one reader. Everything you are asked to do — \
+score, select, place, summarize, introduce — serves his taste, not a general \
+audience's. When a judgement call is close, re-read this profile and decide the \
+way he would.
+
+## The reader
+
+A software engineer in the Boston area who reads on e-ink in the morning. He \
+would rather read six excellent long pieces than thirty adequate short ones. He \
+reads across an unusually wide range of subjects and does not need a topic to be \
+professionally useful to enjoy it.
+
+## What he wants
+
+- **Long-form and high-effort above all.** Essays, deep dives, post-mortems, \
+field notes, annotated experiments, thorough explainers, personal narratives with \
+real specificity. Length is a proxy, not the goal: what he is buying is evident \
+effort and a point of view.
+- **Any topic, if the writing is excellent.** A brilliant piece on medieval \
+bookbinding beats a competent one on his favourite language. Do not reject \
+something merely because it sits outside the interest list below.
+- **Social proof as a quality signal, not a ranking.** Hundreds of HN or Reddit \
+points and a busy comment thread mean the piece survived contact with a critical \
+audience — treat it as evidence, then judge the writing yourself. A quiet post \
+from a good blog can outrank a viral one.
+- **Boston and New England local news** — city government, transit, universities, \
+neighbourhood and civic stories.
+- **Ultra-niche community news.** Small scenes with their own vocabulary — a \
+mailing-list argument, a hobby project's release story, a subculture's internal \
+debate — are a feature of this paper, not a distraction.
+- **World and US news kept light and neutral.** Wikipedia-Current-Events register: \
+what happened, who is involved, no outrage, no opinion columns. The World \
+Briefing section is compiled separately; do not fill the paper with wire copy.
+
+## What he does not want
+
+Press releases and funding announcements dressed as news; SEO listicles; \
+link-roundup and \"this week in X\" posts; changelogs and release notes without \
+analysis; sponsored content and thinly disguised marketing; crypto and \
+engagement-bait; rewrites of a story he can read at the source; culture-war \
+outrage; anything whose substance is one paragraph stretched to five.
+
+## How to judge
+
+Ask: *would he still be glad he read this an hour later?* Reward specificity, \
+first-hand experience, honest uncertainty, and prose with a human behind it. \
+Penalize padding, unsourced confidence, and summaries of other people's work. \
+Prefer the primary source over the aggregator when both are present.";
+
+/// Assemble the full profile document from interests, stated preferences and the
+/// current learned-adjustments block (§3.6).
+///
+/// Pure and deterministic: the same inputs always produce the same bytes.
+pub fn build(interests: &[String], learned_adjustments: &str) -> String {
+    let mut doc = String::with_capacity(8 * 1024);
+    doc.push_str("# The Daily EPUB — reader taste profile\n\n");
+    doc.push_str(PROFILE_PREAMBLE);
+    doc.push_str("\n\n## Stated preferences (verbatim)\n\n");
+    doc.push_str(STATED_PREFERENCES);
+    doc.push_str("\n\n## Standing interests\n\n");
+    doc.push_str(
+        "These are his ~220 subscribed interest topics, grouped. They raise the \
+         floor for a match, but never cap the paper: an outstanding article on \
+         none of these still belongs.\n\n",
+    );
+    for (theme, members) in group_into_themes(interests) {
+        let _ = writeln!(doc, "- **{}**: {}", theme, members.join(", "));
+    }
+    doc.push_str("\n## Learned adjustments (rebuilt weekly from 👍/👎 ratings)\n\n");
+    let learned = learned_adjustments.trim();
+    doc.push_str(if learned.is_empty() {
+        NO_LEARNED_ADJUSTMENTS
+    } else {
+        learned
+    });
+    doc.push('\n');
+    doc
+}
+
+// ---------------------------------------------------------------------------
+// Persistence (§3.6 `kv`)
+// ---------------------------------------------------------------------------
+
+/// `kv[profile_version]` payload.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+struct ProfileVersion {
+    version: i64,
+    built_at: String,
+}
+
+async fn stored_version(db: &Db) -> anyhow::Result<Option<(i64, Timestamp)>> {
+    let Some(raw) = db.kv_get(KV_PROFILE_VERSION).await? else {
+        return Ok(None);
+    };
+    match serde_json::from_str::<ProfileVersion>(&raw) {
+        Ok(v) => {
+            let built = v.built_at.parse::<Timestamp>().unwrap_or_else(|_| {
+                tracing::warn!(value = %v.built_at, "unparseable profile build time");
+                Timestamp::UNIX_EPOCH
+            });
+            Ok(Some((v.version, built)))
+        }
+        Err(e) => {
+            tracing::warn!(error = %e, "unparseable kv[profile_version]; treating as absent");
+            Ok(None)
+        }
+    }
+}
+
+async fn store(db: &Db, profile: &TasteProfile, learned: &str) -> anyhow::Result<()> {
+    db.kv_set(KV_TASTE_PROFILE, &profile.text).await?;
+    db.kv_set(KV_LEARNED_ADJUSTMENTS, learned).await?;
+    let version = serde_json::to_string(&ProfileVersion {
+        version: profile.version,
+        built_at: profile.built_at.to_string(),
+    })?;
+    db.kv_set(KV_PROFILE_VERSION, &version).await?;
+    Ok(())
+}
+
+/// Load the stored profile, building a default one on first run (§3.6).
+pub async fn load_or_build(db: &Db, opml_path: &Path) -> anyhow::Result<TasteProfile> {
+    if let Some(text) = db.kv_get(KV_TASTE_PROFILE).await?.filter(|t| !t.is_empty()) {
+        let (version, built_at) = stored_version(db).await?.unwrap_or((1, Timestamp::now()));
+        tracing::debug!(version, chars = text.len(), "loaded stored taste profile");
+        return Ok(TasteProfile {
+            text,
+            version,
+            built_at,
+        });
+    }
+    let interests = parse_interests(opml_path)?;
+    let learned = db.kv_get(KV_LEARNED_ADJUSTMENTS).await?.unwrap_or_default();
+    let profile = TasteProfile {
+        text: build(&interests, &learned),
+        version: 1,
+        built_at: Timestamp::now(),
+    };
+    store(db, &profile, &learned).await?;
+    tracing::info!(
+        interests = interests.len(),
+        chars = profile.text.len(),
+        "built the initial taste profile"
+    );
+    Ok(profile)
+}
+
+/// True when the stored profile is older than [`REBUILD_INTERVAL_DAYS`] (§3.6).
+pub async fn is_stale(db: &Db) -> anyhow::Result<bool> {
+    let Some((_, built_at)) = stored_version(db).await? else {
+        return Ok(true);
+    };
+    let age_days = (Timestamp::now().as_second() - built_at.as_second()) / 86_400;
+    Ok(age_days >= REBUILD_INTERVAL_DAYS)
+}
+
+/// The automatic weekly rebuild the pipeline calls before curating (§3.6).
+///
+/// Rebuilds only when the stored profile is at least a week old *and* there are
+/// ratings to learn from; otherwise returns the profile unchanged. Failures are
+/// non-fatal — a stale profile still curates fine.
+pub async fn weekly_rebuild_if_due(
+    db: &Db,
+    llm: &LlmClient,
+    opml_path: &Path,
+) -> anyhow::Result<Option<TasteProfile>> {
+    if !is_stale(db).await? {
+        return Ok(None);
+    }
+    if recent_ratings(db).await?.is_empty() {
+        tracing::debug!("profile is stale but there are no ratings to learn from");
+        return Ok(None);
+    }
+    tracing::info!("taste profile is over a week old; rebuilding learned adjustments");
+    Ok(Some(rebuild(db, llm, opml_path).await?))
+}
+
+// ---------------------------------------------------------------------------
+// Rebuild (§3.6c, §3.9)
+// ---------------------------------------------------------------------------
+
+/// A rated article as fed to the learned-adjustments prompt (§3.6c).
+#[derive(Debug, Clone, PartialEq)]
+pub struct RatedArticle {
+    pub vote: Vote,
+    pub title: String,
+    pub feed_title: String,
+    pub category: String,
+    /// The stage-A category the model itself assigned, when we have one.
+    pub llm_category: String,
+}
+
+/// Recent ratings joined to article titles, feeds and categories (§3.6c).
+///
+/// `db.rs` exposes `recent_ratings_detailed`, but it returns titles only; the
+/// prompt is much more useful with the feed and category attached.
+pub async fn recent_ratings(db: &Db) -> anyhow::Result<Vec<RatedArticle>> {
+    // Timestamp arithmetic only accepts uniform units, so days become hours.
+    let since = Timestamp::now()
+        .checked_sub(jiff::Span::new().hours(RATINGS_LOOKBACK_DAYS * 24))
+        .unwrap_or(Timestamp::UNIX_EPOCH);
+    let since_date = since.to_zoned(jiff::tz::TimeZone::UTC).date();
+    let rows = sqlx::query(
+        "SELECT r.vote AS vote,
+                COALESCE(a.title, '') AS title,
+                COALESCE(e.feed_title, '') AS feed_title,
+                COALESCE(e.category, '') AS category,
+                COALESCE((SELECT s.llm_category FROM scores s
+                           WHERE s.article_id = a.id AND s.llm_category IS NOT NULL
+                           ORDER BY s.run_date DESC LIMIT 1), '') AS llm_category
+           FROM ratings r
+           JOIN articles a ON a.id = r.article_id
+           LEFT JOIN entries e ON e.id = a.best_entry_id
+          WHERE r.issue_date >= ?
+          ORDER BY r.rated_at DESC
+          LIMIT ?",
+    )
+    .bind(since_date.to_string())
+    .bind(MAX_RATINGS_IN_PROMPT as i64)
+    .fetch_all(db.pool())
+    .await
+    .context("loading recent ratings for the profile rebuild")?;
+
+    Ok(rows
+        .iter()
+        .map(|r| RatedArticle {
+            vote: if r.get::<i64, _>("vote") >= 0 {
+                Vote::Up
+            } else {
+                Vote::Down
+            },
+            title: r.get("title"),
+            feed_title: r.get("feed_title"),
+            category: r.get("category"),
+            llm_category: r.get("llm_category"),
+        })
+        .collect())
+}
+
+/// Instruction block for the weekly learned-adjustments rewrite (§3.6c).
+pub const LEARNED_ADJUSTMENTS_PROMPT: &str = "\
+TASK: rewrite the \"Learned adjustments\" section of the reader profile in your \
+system prompt, using only the rating history below.
+
+Each line is a thumbs-up or thumbs-down the reader gave an article that appeared \
+in a past issue, with the article's title, the feed it came from, and its \
+category.
+
+Look for patterns, not one-offs. Good adjustments name a *kind* of article and a \
+*reason*: \"consistently downvotes vendor engineering-blog posts that are really \
+product announcements\"; \"consistently upvotes database-internals deep dives, \
+even very long ones\"; \"lukewarm on AI-industry news, warm on hands-on LLM \
+tinkering\". Ignore patterns supported by fewer than two ratings, and never \
+contradict the stated preferences — refine them.
+
+Write 120–200 words as 4–8 bullet points, each one imperative and usable while \
+scoring (\"Rank X higher\", \"Be sceptical of Y\"). Do not mention specific \
+article titles, the rating counts, or this instruction. If the history is too \
+thin to support any pattern, say so in one sentence instead of inventing one.
+
+Return JSON exactly: {\"learned_adjustments\": \"<the bullet points, as markdown>\"}
+
+RATING HISTORY (newest first):
+";
+
+/// The weekly rewrite's JSON envelope.
+#[derive(Debug, Clone, Deserialize)]
+struct LearnedAdjustmentsResponse {
+    #[serde(default)]
+    learned_adjustments: String,
+}
+
+/// Render the rating history block of the rebuild prompt (§3.6c).
+pub fn build_rebuild_prompt(ratings: &[RatedArticle]) -> String {
+    let mut prompt = String::from(LEARNED_ADJUSTMENTS_PROMPT);
+    let (mut up, mut down) = (0usize, 0usize);
+    for r in ratings {
+        match r.vote {
+            Vote::Up => up += 1,
+            Vote::Down => down += 1,
+        }
+        let category = if r.llm_category.is_empty() {
+            r.category.as_str()
+        } else {
+            r.llm_category.as_str()
+        };
+        let _ = writeln!(
+            prompt,
+            "{} | {} | feed: {} | category: {}",
+            match r.vote {
+                Vote::Up => "UP  ",
+                Vote::Down => "DOWN",
+            },
+            r.title.trim(),
+            if r.feed_title.is_empty() {
+                "unknown"
+            } else {
+                r.feed_title.trim()
+            },
+            if category.is_empty() {
+                "unknown"
+            } else {
+                category.trim()
+            },
+        );
+    }
+    let _ = write!(prompt, "\n({up} up, {down} down)\n");
+    prompt
+}
+
+/// `daily-epub profile rebuild` — summarize recent ratings into a new learned
+/// adjustments section and store a new profile version (§3.6, §3.9).
+pub async fn rebuild(db: &Db, llm: &LlmClient, opml_path: &Path) -> anyhow::Result<TasteProfile> {
+    let interests = parse_interests(opml_path)?;
+    let ratings = recent_ratings(db).await?;
+    let previous = db.kv_get(KV_LEARNED_ADJUSTMENTS).await?.unwrap_or_default();
+
+    let learned = if ratings.is_empty() {
+        tracing::info!("no ratings in the lookback window; keeping the existing adjustments");
+        previous
+    } else {
+        let prompt = build_rebuild_prompt(&ratings);
+        match llm
+            .complete_json::<LearnedAdjustmentsResponse>(&prompt, 0.4)
+            .await
+        {
+            Ok(resp) if !resp.learned_adjustments.trim().is_empty() => {
+                tracing::info!(
+                    ratings = ratings.len(),
+                    chars = resp.learned_adjustments.len(),
+                    "rewrote the learned-adjustments section"
+                );
+                resp.learned_adjustments.trim().to_string()
+            }
+            Ok(_) => {
+                tracing::warn!("the model returned empty adjustments; keeping the previous ones");
+                previous
+            }
+            Err(e) => {
+                tracing::warn!(error = %e, "learned-adjustments rewrite failed; keeping the previous ones");
+                previous
+            }
+        }
+    };
+
+    let next_version = stored_version(db).await?.map_or(1, |(v, _)| v + 1);
+    let profile = TasteProfile {
+        text: build(&interests, &learned),
+        version: next_version,
+        built_at: Timestamp::now(),
+    };
+    store(db, &profile, &learned).await?;
+    tracing::info!(
+        version = profile.version,
+        chars = profile.text.len(),
+        "stored a new taste profile"
+    );
+    Ok(profile)
+}
+
+// ---------------------------------------------------------------------------
+// Feed priors (§3.9a)
+// ---------------------------------------------------------------------------
+
+/// Recompute per-feed beta-smoothed priors from the ratings table (§3.9).
+///
+/// Returns the number of feeds written. `FeedPrior::rate()` does the smoothing;
+/// this only maintains the raw counts plus how often the feed has been included.
+pub async fn rebuild_feed_priors(db: &Db) -> anyhow::Result<usize> {
+    use std::collections::HashMap;
+
+    use crate::types::{FeedId, FeedPrior};
+
+    let mut priors: HashMap<FeedId, FeedPrior> = HashMap::new();
+    for (feed_id, vote) in db.ratings_with_feed().await? {
+        let entry = priors.entry(feed_id).or_insert(FeedPrior {
+            feed_id,
+            ..FeedPrior::default()
+        });
+        match vote {
+            Vote::Up => entry.upvotes += 1,
+            Vote::Down => entry.downvotes += 1,
+        }
+    }
+
+    let rows = sqlx::query(
+        "SELECT e.feed_id AS feed_id, COUNT(*) AS included
+           FROM issue_articles ia
+           JOIN articles a ON a.id = ia.article_id
+           JOIN entries e ON e.id = a.best_entry_id
+          GROUP BY e.feed_id",
+    )
+    .fetch_all(db.pool())
+    .await
+    .context("counting per-feed inclusions")?;
+    for row in &rows {
+        let feed_id: FeedId = row.get("feed_id");
+        let included: i64 = row.get("included");
+        priors
+            .entry(feed_id)
+            .or_insert(FeedPrior {
+                feed_id,
+                ..FeedPrior::default()
+            })
+            .included = included;
+    }
+
+    for prior in priors.values() {
+        db.upsert_feed_prior(prior).await?;
+    }
+    tracing::info!(feeds = priors.len(), "rebuilt feed priors");
+    Ok(priors.len())
+}
+
+/// Convenience for callers that only have a [`Date`]: the ratings lookback start.
+pub fn ratings_since(today: Date) -> Date {
+    today
+        .checked_sub(jiff::Span::new().days(RATINGS_LOOKBACK_DAYS))
+        .unwrap_or(today)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::types::Rating;
+
+    const OPML_PATH: &str = concat!(env!("CARGO_MANIFEST_DIR"), "/data/scour-interests.opml");
+
+    fn interests() -> Vec<String> {
+        parse_interests(Path::new(OPML_PATH)).expect("the shipped OPML parses")
+    }
+
+    #[test]
+    fn parses_the_shipped_opml() {
+        let list = interests();
+        assert!(
+            list.len() > 180,
+            "expected ~220 interests, got {}",
+            list.len()
+        );
+        assert!(list.iter().any(|i| i == "Rust"));
+        assert!(list.iter().any(|i| i == "Boston Tech"));
+        assert!(list.iter().any(|i| i == "E-Ink Displays"));
+        // Trailing whitespace is trimmed and case-duplicates collapse.
+        assert!(list.iter().any(|i| i == "photography"));
+        let lowered: Vec<String> = list.iter().map(|i| i.to_lowercase()).collect();
+        let unique: BTreeSet<&String> = lowered.iter().collect();
+        assert_eq!(unique.len(), lowered.len(), "duplicates survived");
+        assert!(!list.iter().any(|i| i.contains("scour.ing")));
+    }
+
+    #[test]
+    fn parsing_handles_entities_and_empties() {
+        let raw = r#"<opml><body>
+            <outline text="Tea &amp; Coffee" xmlUrl="x?a=1&amp;b=2"/>
+            <outline text="  Rust  "/>
+            <outline text="rust"/>
+            <outline text=""/>
+        </body></opml>"#;
+        assert_eq!(
+            parse_interests_str(raw),
+            vec!["Tea & Coffee".to_string(), "Rust".to_string()]
+        );
+    }
+
+    #[test]
+    fn theming_is_deterministic_and_total() {
+        let list = interests();
+        let a = group_into_themes(&list);
+        let b = group_into_themes(&list);
+        assert_eq!(a, b);
+        let grouped: usize = a.iter().map(|(_, m)| m.len()).sum();
+        assert_eq!(
+            grouped,
+            list.len(),
+            "every interest lands in exactly one theme"
+        );
+        assert!(a.len() >= 6, "expected several themes, got {}", a.len());
+        // Members are sorted within a theme.
+        for (_, members) in &a {
+            let mut sorted = members.clone();
+            sorted.sort_by_key(|m| (m.to_lowercase(), m.clone()));
+            assert_eq!(members, &sorted);
+        }
+    }
+
+    #[test]
+    fn profile_document_is_deterministic_and_complete() {
+        let list = interests();
+        let one = build(&list, "");
+        let two = build(&list, "");
+        assert_eq!(one, two, "profile assembly must be byte-stable");
+        assert_eq!(one.as_bytes(), two.as_bytes());
+
+        assert!(one.contains(STATED_PREFERENCES));
+        assert!(one.contains(NO_LEARNED_ADJUSTMENTS));
+        assert!(one.contains("Boston"));
+        assert!(one.contains("Wikipedia-Current-Events"));
+        assert!(one.contains("Rust"));
+        assert!(one.contains("ultra-niche") || one.contains("Ultra-niche"));
+        // A real document, not a stub, but not a novel either.
+        let words = one.split_whitespace().count();
+        assert!((500..3000).contains(&words), "profile is {words} words");
+
+        let learned = build(&list, "- Rank database internals higher.");
+        assert!(learned.contains("- Rank database internals higher."));
+        assert!(!learned.contains(NO_LEARNED_ADJUSTMENTS));
+    }
+
+    async fn temp_db() -> (tempfile::TempDir, Db) {
+        let dir = tempfile::tempdir().expect("tempdir");
+        let db = Db::open_and_migrate(&dir.path().join("profile.db"))
+            .await
+            .expect("db");
+        (dir, db)
+    }
+
+    #[tokio::test]
+    async fn load_or_build_persists_and_reuses() {
+        let (_dir, db) = temp_db().await;
+        let first = load_or_build(&db, Path::new(OPML_PATH))
+            .await
+            .expect("first build");
+        assert_eq!(first.version, 1);
+        assert!(!is_stale(&db).await.expect("staleness"));
+
+        let second = load_or_build(&db, Path::new(OPML_PATH))
+            .await
+            .expect("second load");
+        assert_eq!(first.text, second.text);
+        assert_eq!(second.version, 1);
+        assert_eq!(
+            db.kv_get(KV_TASTE_PROFILE).await.expect("kv").as_deref(),
+            Some(first.text.as_str())
+        );
+    }
+
+    #[tokio::test]
+    async fn missing_version_row_means_stale() {
+        let (_dir, db) = temp_db().await;
+        assert!(is_stale(&db).await.expect("staleness"));
+        db.kv_set(KV_PROFILE_VERSION, "not json")
+            .await
+            .expect("kv set");
+        assert!(is_stale(&db).await.expect("staleness"));
+        db.kv_set(
+            KV_PROFILE_VERSION,
+            r#"{"version":3,"built_at":"2000-01-01T00:00:00Z"}"#,
+        )
+        .await
+        .expect("kv set");
+        assert!(is_stale(&db).await.expect("staleness"));
+    }
+
+    #[tokio::test]
+    async fn rebuild_uses_the_model_and_bumps_the_version() {
+        use super::super::llm::{MockBackend, UsageMeter};
+        use crate::config::DeepseekConfig;
+        use std::sync::Arc;
+
+        let (_dir, db) = temp_db().await;
+        load_or_build(&db, Path::new(OPML_PATH))
+            .await
+            .expect("initial");
+        seed_rating(&db, 1, "Postgres index internals", Vote::Up).await;
+        seed_rating(&db, 2, "Series B funding announced", Vote::Down).await;
+
+        let backend = Arc::new(MockBackend::new());
+        backend.push(
+            r#"{"learned_adjustments": "- Rank database internals deep dives higher.\n- Be sceptical of funding announcements."}"#,
+            crate::types::TokenUsage::default(),
+        );
+        let llm = LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), 2.0),
+            backend.clone(),
+        );
+
+        let rebuilt = rebuild(&db, &llm, Path::new(OPML_PATH))
+            .await
+            .expect("rebuild");
+        assert_eq!(rebuilt.version, 2);
+        assert!(
+            rebuilt
+                .text
+                .contains("Rank database internals deep dives higher.")
+        );
+        assert!(
+            rebuilt
+                .text
+                .contains("Be sceptical of funding announcements.")
+        );
+
+        // The rating history reached the prompt, with feed + category context.
+        let prompts = backend.prompts();
+        assert_eq!(prompts.len(), 1);
+        assert!(prompts[0].user.contains("Postgres index internals"));
+        assert!(
+            prompts[0]
+                .user
+                .contains("DOWN | Series B funding announced")
+        );
+        assert!(prompts[0].user.contains("(1 up, 1 down)"));
+
+        // A later reload sees the new document.
+        let loaded = load_or_build(&db, Path::new(OPML_PATH))
+            .await
+            .expect("reload");
+        assert_eq!(loaded.text, rebuilt.text);
+        assert_eq!(loaded.version, 2);
+    }
+
+    #[tokio::test]
+    async fn rebuild_without_ratings_skips_the_model() {
+        use super::super::llm::{MockBackend, UsageMeter};
+        use crate::config::DeepseekConfig;
+        use std::sync::Arc;
+
+        let (_dir, db) = temp_db().await;
+        let backend = Arc::new(MockBackend::new());
+        let llm = LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), 2.0),
+            backend.clone(),
+        );
+        let profile = rebuild(&db, &llm, Path::new(OPML_PATH))
+            .await
+            .expect("rebuild");
+        assert_eq!(backend.calls(), 0, "no ratings ⇒ no LLM call");
+        assert!(profile.text.contains(NO_LEARNED_ADJUSTMENTS));
+        assert!(
+            weekly_rebuild_if_due(&db, &llm, Path::new(OPML_PATH))
+                .await
+                .expect("weekly")
+                .is_none()
+        );
+    }
+
+    #[tokio::test]
+    async fn feed_priors_are_recomputed_from_ratings() {
+        let (_dir, db) = temp_db().await;
+        seed_rating(&db, 1, "Good one", Vote::Up).await;
+        seed_rating(&db, 2, "Bad one", Vote::Down).await;
+        let feeds = rebuild_feed_priors(&db).await.expect("priors");
+        assert_eq!(feeds, 1);
+        let priors = db.feed_priors().await.expect("load");
+        assert_eq!(priors.len(), 1);
+        assert_eq!(priors[0].upvotes, 1);
+        assert_eq!(priors[0].downvotes, 1);
+        assert!((priors[0].rate() - 0.5).abs() < 1e-12);
+    }
+
+    /// Insert an entry + article + rating triple that the joins can see.
+    async fn seed_rating(db: &Db, id: i64, title: &str, vote: Vote) {
+        use crate::types::{Entry, ExtractMethod, SourceRef};
+        let ts: Timestamp = "2026-08-15T05:30:00Z".parse().expect("ts");
+        db.upsert_entry(&Entry {
+            id,
+            feed_id: 7,
+            feed_title: Some("A Feed".into()),
+            category: Some("Tech".into()),
+            title: title.into(),
+            url: format!("https://example.com/{id}"),
+            canonical_url: Some(format!("https://example.com/{id}")),
+            author: None,
+            published_at: Some(ts),
+            comments_url: None,
+            raw_content: String::new(),
+            fetched_at: ts,
+        })
+        .await
+        .expect("entry");
+        let article_id = db
+            .upsert_article(&crate::types::Article {
+                id: 0,
+                canonical_url: format!("https://example.com/{id}"),
+                title: title.into(),
+                best_entry_id: id,
+                content_html: String::new(),
+                word_count: 900,
+                excerpt_only: false,
+                image_count: 0,
+                sources: Vec::<SourceRef>::new(),
+                first_seen: ts,
+                url: format!("https://example.com/{id}"),
+                author: None,
+                feed_id: 7,
+                feed_title: "A Feed".into(),
+                category: Some("Tech".into()),
+                published_at: Some(ts),
+                comments_url: None,
+                image_urls: vec![],
+                social: vec![],
+                extract_method: ExtractMethod::Miniflux,
+            })
+            .await
+            .expect("article");
+        db.upsert_rating(&Rating {
+            issue_date: Timestamp::now().to_zoned(jiff::tz::TimeZone::UTC).date(),
+            article_id,
+            vote,
+            rated_at: Timestamp::now(),
+        })
+        .await
+        .expect("rating");
+    }
+}
diff --git a/src/curate/score.rs b/src/curate/score.rs
new file mode 100644
index 0000000..9636ce7
--- /dev/null
+++ b/src/curate/score.rs
@@ -0,0 +1,593 @@
+//! Stage A — batched LLM scoring (spec §3.6).
+//!
+//! Batches of `deepseek.score_batch_size` articles per request. Per article we
+//! send title, source feed, author, word count, social stats, sources list and a
+//! ~200-word excerpt; the model returns one JSON object per article.
+//!
+//! Parsing is deliberately forgiving: one malformed item must not cost us the
+//! other eleven, and a failed batch must not fail the run.
+
+use std::collections::HashMap;
+use std::fmt::Write as _;
+
+use serde::{Deserialize, Serialize};
+use serde_json::Value;
+
+use super::llm::{LlmClient, LlmError, strip_code_fence};
+use super::{html_to_text, truncate_words};
+use crate::types::{ArticleId, LlmScore, ScoredArticle, SourceKind};
+
+/// Words of article text sent per candidate in stage A (§3.6).
+pub const EXCERPT_WORDS: usize = 200;
+
+/// One element of the stage-A JSON response (§3.6).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct ScoreItem {
+    pub id: ArticleId,
+    /// 0–10.
+    pub score: f64,
+    pub category: String,
+    /// ≤ 20 words.
+    #[serde(default)]
+    pub rationale: String,
+    #[serde(default)]
+    pub is_paywalled_guess: bool,
+}
+
+impl From<ScoreItem> for LlmScore {
+    fn from(i: ScoreItem) -> Self {
+        LlmScore {
+            score: i.score,
+            category: i.category,
+            rationale: i.rationale,
+            is_paywalled_guess: i.is_paywalled_guess,
+        }
+    }
+}
+
+/// Envelope the model is asked to return (`{"articles": [...]}`).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct ScoreResponse {
+    #[serde(default)]
+    pub articles: Vec<ScoreItem>,
+}
+
+/// The invariant instruction block for stage A. Everything article-specific goes
+/// in the per-batch tail so this prefix stays cacheable (§3.6).
+pub const SCORE_INSTRUCTIONS: &str = "\
+TASK: score a batch of candidate articles for today's issue of The Daily EPUB.
+
+Judge each article against the reader profile in your system prompt — not against \
+a general audience, and not against what is objectively newsworthy.
+
+Return one object per input article with these fields:
+  \"id\"                  integer, copied exactly from the input
+  \"score\"               number 0-10, the rubric below
+  \"category\"            one short label from the palette below
+  \"rationale\"           at most 20 words, concrete, no hedging, no restating the title
+  \"is_paywalled_guess\"  true when the text looks truncated, teaser-like or paywalled
+
+SCORING RUBRIC — calibrate hard; a normal day averages about 4, and a 9 should \
+appear a couple of times a week, not a couple of times a day:
+  9-10  Exceptional. Original reporting, a deep technical dive, or an essay he \
+will still be thinking about next week. Evident effort and a real point of view.
+  7-8   Strong. A well-made long-form piece squarely in his interests, or an \
+outstanding piece outside them.
+  5-6   Worth a slot on a thin day. Solid, useful, a little thin or a little \
+familiar.
+  3-4   Marginal. Competent news-of-the-day, short posts, incremental updates, \
+good writing about an over-covered story.
+  1-2   Weak. Announcements, changelogs and release notes, link roundups, \
+listicles, rewrites of a story available at the source, thin AI-industry churn.
+  0     Unusable. Press releases, sponsored content, engagement bait, spam, \
+pure crypto promotion, or an entry with no readable body.
+
+CALIBRATION NOTES
+- Length alone is not quality; padding scores worse than a tight short piece. But \
+between two equally good pieces, prefer the one with more substance.
+- Social proof is evidence, not a verdict: hundreds of HN points mean a critical \
+audience read it; a quiet post from a good blog can still outrank it.
+- \"came via scour\" means the story already matched one of his standing \
+interests. \"came via hn_frontpage\" means it cleared HN's front page.
+- Boston/New England local stories and ultra-niche community news get a genuine \
+lift — this paper wants them.
+- Wire-service world/US news should score low here: the World Briefing section \
+covers that separately.
+- Excerpt-only or paywalled text is a real cost to the reader; score it lower \
+unless the piece is clearly excellent.
+
+Return JSON exactly in this shape, with one entry per input article and nothing \
+else:
+{\"articles\": [{\"id\": 123, \"score\": 7.5, \"category\": \"Tech & Engineering\", \
+\"rationale\": \"first-hand account of migrating 40TB off Postgres\", \
+\"is_paywalled_guess\": false}]}";
+
+/// Render the user prompt for one batch (§3.6).
+pub fn build_batch_prompt(batch: &[ScoredArticle], sections: &[String]) -> String {
+    let mut prompt = String::with_capacity(4096 + batch.len() * 1500);
+    prompt.push_str(SCORE_INSTRUCTIONS);
+    let _ = write!(
+        prompt,
+        "\n\nCATEGORY PALETTE (use one of these exact strings): {}\n\nARTICLES ({} in this batch)\n",
+        sections.join(" | "),
+        batch.len()
+    );
+    for candidate in batch {
+        prompt.push('\n');
+        prompt.push_str(&render_candidate(candidate));
+    }
+    prompt
+}
+
+/// One article's block in the stage-A prompt (§3.6).
+fn render_candidate(candidate: &ScoredArticle) -> String {
+    let a = &candidate.article;
+    let mut block = String::with_capacity(1500);
+    let _ = writeln!(block, "--- id: {}", a.id);
+    let _ = writeln!(block, "title: {}", a.title.trim());
+    let _ = writeln!(
+        block,
+        "feed: {}{}",
+        if a.feed_title.is_empty() {
+            "unknown"
+        } else {
+            a.feed_title.trim()
+        },
+        a.category
+            .as_deref()
+            .filter(|c| !c.is_empty())
+            .map(|c| format!(" (category: {c})"))
+            .unwrap_or_default()
+    );
+    if let Some(author) = a.author.as_deref().filter(|s| !s.trim().is_empty()) {
+        let _ = writeln!(block, "author: {}", author.trim());
+    }
+    let _ = writeln!(
+        block,
+        "length: {} words (~{} min read){}",
+        a.word_count,
+        a.reading_minutes(),
+        if a.excerpt_only {
+            " [EXCERPT ONLY — full text unavailable]"
+        } else {
+            ""
+        }
+    );
+    let _ = writeln!(block, "social: {}", social_line(candidate));
+    let _ = writeln!(block, "came via: {}", sources_line(candidate));
+    let excerpt = truncate_words(&html_to_text(&a.content_html), EXCERPT_WORDS);
+    let _ = writeln!(
+        block,
+        "excerpt: {}",
+        if excerpt.is_empty() {
+            "(no body text extracted)"
+        } else {
+            &excerpt
+        }
+    );
+    block
+}
+
+fn social_line(candidate: &ScoredArticle) -> String {
+    if candidate.article.social.is_empty() {
+        return "none found".into();
+    }
+    let mut parts: Vec<String> = candidate
+        .article
+        .social
+        .iter()
+        .map(|s| {
+            format!(
+                "{} {} points / {} comments",
+                s.source.display_name(),
+                s.score,
+                s.num_comments
+            )
+        })
+        .collect();
+    parts.push(format!("composite {:.2}", candidate.social_score));
+    parts.join("; ")
+}
+
+fn sources_line(candidate: &ScoredArticle) -> String {
+    let mut kinds: Vec<&str> = candidate
+        .article
+        .sources
+        .iter()
+        .map(|s| match s.kind {
+            SourceKind::Scour => "scour",
+            SourceKind::HnFrontpage => "hn_frontpage",
+            SourceKind::Lobsters => "lobsters",
+            SourceKind::Reddit => "reddit",
+            SourceKind::Feed => "feed",
+        })
+        .collect();
+    kinds.sort_unstable();
+    kinds.dedup();
+    if candidate.auto_include {
+        kinds.push("always-include feed (cannot be dropped)");
+    }
+    if kinds.is_empty() {
+        "feed".into()
+    } else {
+        kinds.join(", ")
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Response parsing (§3.6: tolerate anything the model does to us)
+// ---------------------------------------------------------------------------
+
+/// Keys the model might wrap the array in, in preference order.
+const ARRAY_KEYS: &[&str] = &["articles", "scores", "results", "items", "data"];
+
+/// Parse a stage-A response leniently: missing optional fields default, scores
+/// are clamped to 0–10, and malformed items are skipped with a warning (§3.6).
+pub fn parse_score_response(raw: &str) -> Vec<ScoreItem> {
+    let cleaned = strip_code_fence(raw);
+    let value: Value = match serde_json::from_str(cleaned) {
+        Ok(v) => v,
+        Err(e) => {
+            tracing::warn!(error = %e, "stage A response was not JSON at all");
+            return Vec::new();
+        }
+    };
+
+    let array = match &value {
+        Value::Array(items) => Some(items),
+        Value::Object(map) => ARRAY_KEYS
+            .iter()
+            .find_map(|k| map.get(*k).and_then(Value::as_array))
+            // Some models return {"1234": {...}} or a single bare object.
+            .or_else(|| map.values().find_map(Value::as_array)),
+        _ => None,
+    };
+    let Some(array) = array else {
+        tracing::warn!("stage A response contained no array of scores");
+        return Vec::new();
+    };
+
+    let mut out = Vec::with_capacity(array.len());
+    let mut skipped = 0usize;
+    for item in array {
+        match parse_item(item) {
+            Some(parsed) => out.push(parsed),
+            None => {
+                skipped += 1;
+                tracing::warn!(item = %truncate_debug(item), "skipping malformed stage A item");
+            }
+        }
+    }
+    if skipped > 0 {
+        tracing::warn!(skipped, kept = out.len(), "stage A items were dropped");
+    }
+    out
+}
+
+fn parse_item(item: &Value) -> Option<ScoreItem> {
+    let obj = item.as_object()?;
+    let id = obj.get("id").and_then(as_i64_lenient)?;
+    let score = obj
+        .get("score")
+        .and_then(as_f64_lenient)
+        .or_else(|| obj.get("rating").and_then(as_f64_lenient))?;
+    Some(ScoreItem {
+        id,
+        score: score.clamp(0.0, 10.0),
+        category: obj
+            .get("category")
+            .and_then(Value::as_str)
+            .unwrap_or_default()
+            .trim()
+            .to_string(),
+        rationale: obj
+            .get("rationale")
+            .or_else(|| obj.get("reason"))
+            .and_then(Value::as_str)
+            .unwrap_or_default()
+            .trim()
+            .to_string(),
+        is_paywalled_guess: obj
+            .get("is_paywalled_guess")
+            .or_else(|| obj.get("paywalled"))
+            .and_then(as_bool_lenient)
+            .unwrap_or(false),
+    })
+}
+
+fn as_i64_lenient(v: &Value) -> Option<i64> {
+    v.as_i64()
+        .or_else(|| v.as_f64().map(|f| f as i64))
+        .or_else(|| v.as_str().and_then(|s| s.trim().parse().ok()))
+}
+
+fn as_f64_lenient(v: &Value) -> Option<f64> {
+    v.as_f64()
+        .or_else(|| v.as_str().and_then(|s| s.trim().parse().ok()))
+        .filter(|f| f.is_finite())
+}
+
+fn as_bool_lenient(v: &Value) -> Option<bool> {
+    v.as_bool().or_else(|| match v.as_str()?.trim() {
+        "true" | "yes" => Some(true),
+        "false" | "no" => Some(false),
+        _ => None,
+    })
+}
+
+fn truncate_debug(v: &Value) -> String {
+    v.to_string().chars().take(160).collect()
+}
+
+// ---------------------------------------------------------------------------
+// Stage driver
+// ---------------------------------------------------------------------------
+
+/// Score every candidate, filling in [`ScoredArticle::llm`] (§3.6).
+///
+/// Batches that fail are logged and left unscored rather than aborting the run.
+/// Returns how many candidates came back with a score.
+pub async fn score_all(
+    llm: &LlmClient,
+    candidates: &mut [ScoredArticle],
+    batch_size: usize,
+    sections: &[String],
+    temperature: f32,
+) -> Result<usize, LlmError> {
+    if candidates.is_empty() {
+        return Ok(0);
+    }
+    let batch_size = batch_size.max(1);
+    let batches = candidates.len().div_ceil(batch_size);
+    let mut scores: HashMap<ArticleId, LlmScore> = HashMap::with_capacity(candidates.len());
+
+    for (n, batch) in candidates.chunks(batch_size).enumerate() {
+        if let Err(e) = llm.meter.check_budget() {
+            tracing::error!(
+                error = %e,
+                batch = n + 1,
+                of = batches,
+                unscored = candidates.len() - scores.len(),
+                "COST CEILING HIT during stage A scoring — remaining batches skipped; \
+                 the lineup will fall back to heuristic ranking for them"
+            );
+            break;
+        }
+        let prompt = build_batch_prompt(batch, sections);
+        tracing::debug!(
+            batch = n + 1,
+            of = batches,
+            articles = batch.len(),
+            approx_tokens = super::approx_tokens(&prompt),
+            "stage A request"
+        );
+        match llm.complete(&prompt, temperature, true).await {
+            Ok(raw) => {
+                let items = parse_score_response(&raw);
+                if items.is_empty() {
+                    tracing::warn!(
+                        batch = n + 1,
+                        of = batches,
+                        "stage A batch returned no scores"
+                    );
+                }
+                for item in items {
+                    scores.insert(item.id, item.into());
+                }
+            }
+            Err(e) => {
+                tracing::warn!(batch = n + 1, of = batches, error = %e,
+                    "stage A batch failed; its articles stay unscored");
+            }
+        }
+    }
+
+    let mut applied = 0usize;
+    for candidate in candidates.iter_mut() {
+        if let Some(score) = scores.remove(&candidate.article.id) {
+            candidate.llm = Some(score);
+            applied += 1;
+        }
+    }
+    if !scores.is_empty() {
+        tracing::warn!(
+            unknown_ids = scores.len(),
+            "stage A returned scores for ids that were not in the batch"
+        );
+    }
+    Ok(applied)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::config::DeepseekConfig;
+    use crate::curate::llm::{MockBackend, UsageMeter};
+    use crate::curate::prefilter::tests::{article, via, with_social};
+    use crate::types::TokenUsage;
+    use std::sync::Arc;
+
+    const BATCH_FIXTURE: &str = include_str!(concat!(
+        env!("CARGO_MANIFEST_DIR"),
+        "/tests/fixtures/deepseek_score_batch.json"
+    ));
+    const MESSY_FIXTURE: &str = include_str!(concat!(
+        env!("CARGO_MANIFEST_DIR"),
+        "/tests/fixtures/deepseek_score_batch_messy.json"
+    ));
+
+    fn sections() -> Vec<String> {
+        crate::config::CurationConfig::default().sections
+    }
+
+    fn candidate(id: i64, title: &str, words: i64) -> ScoredArticle {
+        ScoredArticle {
+            article: article(id, title, words),
+            prefilter_score: 50.0,
+            social_score: 0.0,
+            feed_prior: 0.5,
+            llm: None,
+            auto_include: false,
+        }
+    }
+
+    #[test]
+    fn batch_prompt_carries_every_documented_signal() {
+        let mut c = candidate(12, "Migrating 40TB off Postgres", 3200);
+        c.article = via(
+            with_social(c.article, 342, 210),
+            SourceKind::HnFrontpage,
+            9001,
+        );
+        c.social_score = c.article.social_score();
+        c.auto_include = true;
+        let prompt = build_batch_prompt(&[c], &sections());
+
+        assert!(prompt.starts_with(SCORE_INSTRUCTIONS));
+        assert!(prompt.contains("--- id: 12"));
+        assert!(prompt.contains("title: Migrating 40TB off Postgres"));
+        assert!(prompt.contains("feed: Some Blog (category: Tech)"));
+        assert!(prompt.contains("author: A. Writer"));
+        assert!(prompt.contains("length: 3200 words"));
+        assert!(prompt.contains("HN 342 points / 210 comments"));
+        assert!(prompt.contains("hn_frontpage"));
+        assert!(prompt.contains("always-include feed"));
+        assert!(prompt.contains("excerpt: word word"));
+        assert!(prompt.contains("Tech & Engineering"));
+        // The excerpt is capped.
+        let excerpt_line = prompt
+            .lines()
+            .find(|l| l.starts_with("excerpt:"))
+            .expect("excerpt line");
+        assert!(excerpt_line.split_whitespace().count() <= EXCERPT_WORDS + 2);
+    }
+
+    #[test]
+    fn parses_a_realistic_deepseek_batch() {
+        let items = parse_score_response(BATCH_FIXTURE);
+        assert_eq!(items.len(), 4);
+        assert_eq!(items[0].id, 101);
+        assert!((items[0].score - 8.5).abs() < 1e-9);
+        assert_eq!(items[0].category, "Tech & Engineering");
+        assert!(items[0].rationale.split_whitespace().count() <= 20);
+        assert!(!items[0].is_paywalled_guess);
+        assert!(items[3].is_paywalled_guess);
+        let score: LlmScore = items[0].clone().into();
+        assert_eq!(score.category, "Tech & Engineering");
+    }
+
+    #[test]
+    fn parsing_survives_everything_a_model_might_do() {
+        let items = parse_score_response(MESSY_FIXTURE);
+        let ids: Vec<ArticleId> = items.iter().map(|i| i.id).collect();
+        // 201 fine; 202 string score clamped; 203 missing rationale/category;
+        // 204 out-of-range clamped; the two malformed entries are dropped.
+        assert_eq!(ids, vec![201, 202, 203, 204]);
+        assert!((items[1].score - 6.0).abs() < 1e-9);
+        assert_eq!(items[2].rationale, "");
+        assert_eq!(items[2].category, "");
+        assert!(
+            (items[3].score - 10.0).abs() < 1e-9,
+            "clamped to the 0-10 range"
+        );
+        assert!(items.iter().all(|i| (0.0..=10.0).contains(&i.score)));
+    }
+
+    #[test]
+    fn parsing_tolerates_fences_arrays_and_junk() {
+        assert_eq!(
+            parse_score_response("```json\n{\"articles\":[{\"id\":1,\"score\":5}]}\n```").len(),
+            1
+        );
+        assert_eq!(parse_score_response("[{\"id\": 2, \"score\": 3}]").len(), 1);
+        assert_eq!(
+            parse_score_response("{\"results\":[{\"id\":3,\"score\":\"4.5\"}]}")[0].score,
+            4.5
+        );
+        assert!(parse_score_response("I'm sorry, I can't do that").is_empty());
+        assert!(parse_score_response("{\"articles\": {}}").is_empty());
+    }
+
+    fn client(backend: Arc<MockBackend>, limit_usd: f64) -> LlmClient {
+        LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), limit_usd),
+            backend,
+        )
+    }
+
+    #[tokio::test]
+    async fn scores_are_applied_batch_by_batch() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(
+            r#"{"articles":[{"id":1,"score":8,"category":"Tech & Engineering","rationale":"good"},
+                            {"id":2,"score":2,"category":"Niche Corner","rationale":"thin"}]}"#,
+            TokenUsage::default(),
+        );
+        backend.push(
+            r#"{"articles":[{"id":3,"score":6.5,"category":"Culture & Essays","rationale":"solid"}]}"#,
+            TokenUsage::default(),
+        );
+        let llm = client(Arc::clone(&backend), 2.0);
+
+        let mut candidates = vec![
+            candidate(1, "One", 1000),
+            candidate(2, "Two", 1000),
+            candidate(3, "Three", 1000),
+        ];
+        let scored = score_all(&llm, &mut candidates, 2, &sections(), 0.3)
+            .await
+            .expect("scoring");
+        assert_eq!(scored, 3);
+        assert_eq!(backend.calls(), 2, "batched by score_batch_size");
+        assert_eq!(candidates[0].llm.as_ref().map(|l| l.score), Some(8.0));
+        assert_eq!(candidates[2].llm.as_ref().map(|l| l.score), Some(6.5));
+        // combined_score now reflects the LLM verdict.
+        assert!(candidates[0].combined_score() > candidates[1].combined_score());
+    }
+
+    #[tokio::test]
+    async fn a_failed_batch_does_not_sink_the_run() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push_error("500 upstream exploded");
+        backend.push(
+            r#"{"articles":[{"id":2,"score":7,"category":"Top Stories","rationale":"ok"}]}"#,
+            TokenUsage::default(),
+        );
+        let llm = client(Arc::clone(&backend), 2.0);
+        let mut candidates = vec![candidate(1, "One", 900), candidate(2, "Two", 900)];
+        let scored = score_all(&llm, &mut candidates, 1, &sections(), 0.3)
+            .await
+            .expect("scoring must not abort");
+        assert_eq!(scored, 1);
+        assert!(candidates[0].llm.is_none());
+        assert!(candidates[1].llm.is_some());
+    }
+
+    #[tokio::test]
+    async fn scoring_stops_when_the_budget_is_gone() {
+        let backend = Arc::new(MockBackend::new());
+        // First batch alone blows a $0.05 ceiling ($0.14 per 1M input tokens).
+        backend.push(
+            r#"{"articles":[{"id":1,"score":9,"category":"Top Stories","rationale":"great"}]}"#,
+            TokenUsage {
+                input_tokens: 1_000_000,
+                cached_tokens: 0,
+                output_tokens: 0,
+            },
+        );
+        backend.push(
+            r#"{"articles":[{"id":2,"score":9,"category":"Top Stories","rationale":"great"}]}"#,
+            TokenUsage::default(),
+        );
+        let llm = client(Arc::clone(&backend), 0.05);
+        let mut candidates = vec![candidate(1, "One", 900), candidate(2, "Two", 900)];
+        let scored = score_all(&llm, &mut candidates, 1, &sections(), 0.3)
+            .await
+            .expect("scoring");
+        assert_eq!(scored, 1, "only the first batch ran");
+        assert_eq!(backend.calls(), 1);
+        assert!(llm.meter.budget_exceeded());
+    }
+}
diff --git a/src/curate/select.rs b/src/curate/select.rs
new file mode 100644
index 0000000..4ab7dda
--- /dev/null
+++ b/src/curate/select.rs
@@ -0,0 +1,1000 @@
+//! Stage B — lineup selection (spec §3.6).
+//!
+//! One call: send the top ~40 candidates by [`ScoredArticle::combined_score`] with
+//! their rationales; the model returns the final 15–25 picks, each with a section
+//! from the configured palette, an ordering, and exactly one `lead_story`.
+//!
+//! The model's answer is treated as a proposal, never as gospel: sections are
+//! validated against the palette, the lead is forced to be unique, auto-include
+//! feeds are re-inserted if they were dropped, and the size is clamped to
+//! `target_article_count ± 5`.
+
+use std::collections::{BTreeMap, HashMap, HashSet};
+use std::fmt::Write as _;
+
+use jiff::civil::Date;
+use serde::{Deserialize, Serialize};
+
+use super::llm::{LlmClient, LlmError, strip_code_fence};
+use super::{html_to_text, truncate_words};
+use crate::types::{ArticleId, Lineup, Pick, ScoredArticle, SourceKind, WORLD_BRIEFING_SECTION};
+
+/// How many candidates are offered to stage B (§3.6).
+pub const SHORTLIST_SIZE: usize = 40;
+/// How far the final count may drift from `target_article_count` (§3.6: 15–25
+/// around a default target of 20).
+pub const TARGET_TOLERANCE: usize = 5;
+/// Words of lead-in text shown per candidate in the stage-B prompt.
+const BLURB_WORDS: usize = 45;
+
+/// One element of the stage-B JSON response (§3.6).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct SelectionItem {
+    pub id: ArticleId,
+    /// Must be one of `curation.sections`.
+    pub section: String,
+    pub position: i64,
+    #[serde(default)]
+    pub lead_story: bool,
+}
+
+/// Envelope the model is asked to return.
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct SelectionResponse {
+    #[serde(default)]
+    pub picks: Vec<SelectionItem>,
+}
+
+/// The invariant instruction block for stage B (§3.6).
+pub const SELECT_INSTRUCTIONS: &str = "\
+TASK: assemble today's issue of The Daily EPUB from the shortlist below.
+
+You are choosing what one specific reader — the profile in your system prompt — \
+will actually read on an e-ink screen over breakfast. Build a paper, not a \
+ranking: it should have a shape, a range of subjects, and a clear front page.
+
+RULES
+1. Pick articles by id from the shortlist only. Never invent an id.
+2. Give every pick a section from the palette below, spelled exactly as given.
+3. Number picks within each section from 1 upward, best first.
+4. Flag exactly one pick as \"lead_story\": true — the day's strongest, most \
+substantial piece. It must sit in the first section you use.
+5. Any candidate marked \"always-include\" MUST appear; place it in \"From the \
+Blogroll\" unless it clearly belongs elsewhere.
+6. Do not select two articles that tell the same story; keep the better one.
+
+EDITORIAL JUDGEMENT
+- Favour depth over coverage: a slim issue of excellent pieces beats a full one \
+padded with filler. Drop anything you would not defend.
+- Mix the day up. Several long technical dives in a row is a bad breakfast; \
+alternate register and subject across sections.
+- Keep the local and ultra-niche picks — a Boston story and a small-scene story \
+are worth more here than a third AI-industry item.
+- Score is evidence, not an instruction: overrule it when the paper reads better \
+for it, and say so through your placement.
+- Leave a section out entirely rather than padding it; empty sections are dropped.
+
+Return JSON exactly in this shape and nothing else:
+{\"picks\": [{\"id\": 123, \"section\": \"Top Stories\", \"position\": 1, \
+\"lead_story\": true}]}";
+
+/// Render the stage-B user prompt (§3.6).
+pub fn build_prompt(shortlist: &[ScoredArticle], sections: &[String], target: usize) -> String {
+    let (min, max) = size_bounds(target);
+    let mut prompt = String::with_capacity(2048 + shortlist.len() * 400);
+    prompt.push_str(SELECT_INSTRUCTIONS);
+    let _ = write!(
+        prompt,
+        "\n\nSECTION PALETTE (exact strings, use only these): {}\n\
+         Reserved and unavailable: \"{WORLD_BRIEFING_SECTION}\" is compiled separately.\n\n\
+         SIZE: choose {target} articles; never fewer than {min} and never more than {max}.\n\n\
+         SHORTLIST ({} candidates, best-ranked first)\n",
+        sections.join(" | "),
+        shortlist.len()
+    );
+    for candidate in shortlist {
+        prompt.push('\n');
+        prompt.push_str(&render_candidate(candidate));
+    }
+    prompt
+}
+
+fn render_candidate(candidate: &ScoredArticle) -> String {
+    let a = &candidate.article;
+    let mut block = String::with_capacity(400);
+    let _ = writeln!(block, "--- id: {}", a.id);
+    let _ = writeln!(block, "title: {}", a.title.trim());
+    let _ = writeln!(
+        block,
+        "feed: {} · {} words (~{} min){}",
+        if a.feed_title.is_empty() {
+            "unknown"
+        } else {
+            a.feed_title.trim()
+        },
+        a.word_count,
+        a.reading_minutes(),
+        if a.excerpt_only {
+            " · EXCERPT ONLY"
+        } else {
+            ""
+        }
+    );
+    match candidate.llm.as_ref() {
+        Some(llm) => {
+            let _ = writeln!(
+                block,
+                "score: {:.1} ({}) — {}",
+                llm.score,
+                if llm.category.is_empty() {
+                    "uncategorized"
+                } else {
+                    llm.category.as_str()
+                },
+                llm.rationale.trim()
+            );
+        }
+        None => {
+            let _ = writeln!(
+                block,
+                "score: unscored (heuristic rank {:.0}/100)",
+                candidate.prefilter_score
+            );
+        }
+    }
+    let _ = writeln!(
+        block,
+        "signals: social {:.2}; feed prior {:.2}; via {}{}",
+        candidate.social_score,
+        candidate.feed_prior,
+        source_kinds(candidate),
+        if candidate.auto_include {
+            "; ALWAYS-INCLUDE"
+        } else {
+            ""
+        }
+    );
+    let blurb = truncate_words(&html_to_text(&a.content_html), BLURB_WORDS);
+    if !blurb.is_empty() {
+        let _ = writeln!(block, "opening: {blurb}");
+    }
+    block
+}
+
+fn source_kinds(candidate: &ScoredArticle) -> String {
+    let mut kinds: Vec<&str> = candidate
+        .article
+        .sources
+        .iter()
+        .map(|s| match s.kind {
+            SourceKind::Scour => "scour",
+            SourceKind::HnFrontpage => "hn_frontpage",
+            SourceKind::Lobsters => "lobsters",
+            SourceKind::Reddit => "reddit",
+            SourceKind::Feed => "feed",
+        })
+        .collect();
+    kinds.sort_unstable();
+    kinds.dedup();
+    if kinds.is_empty() {
+        "feed".into()
+    } else {
+        kinds.join("+")
+    }
+}
+
+/// `target ± TARGET_TOLERANCE`, floored at one article (§3.6).
+pub fn size_bounds(target: usize) -> (usize, usize) {
+    let target = target.max(1);
+    (
+        target.saturating_sub(TARGET_TOLERANCE).max(1),
+        target + TARGET_TOLERANCE,
+    )
+}
+
+// ---------------------------------------------------------------------------
+// Section validation (§3.6: the model may only use the configured palette)
+// ---------------------------------------------------------------------------
+
+/// The section unrecognized labels fall back to.
+pub fn default_section(sections: &[String]) -> String {
+    sections
+        .iter()
+        .find(|s| s.as_str() == "Top Stories")
+        .or_else(|| sections.first())
+        .cloned()
+        .unwrap_or_else(|| "Top Stories".to_string())
+}
+
+/// Map whatever the model said onto the configured palette (§3.6).
+///
+/// Exact match → case-insensitive match → best word-overlap match → default.
+pub fn resolve_section(raw: &str, sections: &[String]) -> String {
+    let candidate = raw.trim();
+    if candidate.is_empty() || candidate.eq_ignore_ascii_case(WORLD_BRIEFING_SECTION) {
+        return default_section(sections);
+    }
+    if let Some(exact) = sections.iter().find(|s| s.as_str() == candidate) {
+        return exact.clone();
+    }
+    if let Some(ci) = sections.iter().find(|s| s.eq_ignore_ascii_case(candidate)) {
+        return ci.clone();
+    }
+    let wanted = words_of(candidate);
+    let best = sections
+        .iter()
+        .map(|s| (s, words_of(s).intersection(&wanted).count()))
+        .filter(|(_, overlap)| *overlap > 0)
+        .max_by_key(|(_, overlap)| *overlap);
+    match best {
+        Some((section, _)) => {
+            tracing::debug!(raw = candidate, mapped = %section, "mapped an off-palette section");
+            section.clone()
+        }
+        None => {
+            tracing::warn!(raw = candidate, "unknown section; using the default");
+            default_section(sections)
+        }
+    }
+}
+
+fn words_of(s: &str) -> HashSet<String> {
+    s.split(|c: char| !c.is_alphanumeric())
+        .filter(|w| w.len() > 2 && !w.eq_ignore_ascii_case("and"))
+        .map(str::to_lowercase)
+        .collect()
+}
+
+/// Section guess from feed metadata, used by `--skip-llm` and by top-ups (§3.6).
+pub fn heuristic_section(candidate: &ScoredArticle, sections: &[String]) -> String {
+    if candidate.auto_include {
+        return resolve_section("From the Blogroll", sections);
+    }
+    let haystack = format!(
+        "{} {} {}",
+        candidate.article.category.as_deref().unwrap_or_default(),
+        candidate.article.feed_title,
+        candidate.article.title
+    )
+    .to_lowercase();
+
+    const RULES: &[(&str, &[&str])] = &[
+        (
+            "Boston & Local",
+            &[
+                "boston",
+                "massachusetts",
+                "cambridge",
+                "mbta",
+                "new england",
+            ],
+        ),
+        (
+            "AI & Machine Learning",
+            &[
+                " ai ",
+                "ai:",
+                "llm",
+                "machine learning",
+                "neural",
+                "openai",
+                "anthropic",
+                "gpt",
+                "diffusion",
+            ],
+        ),
+        (
+            "Science & Space",
+            &[
+                "science",
+                "space",
+                "nasa",
+                "astronom",
+                "physics",
+                "biology",
+                "climate",
+                "aerospace",
+            ],
+        ),
+        (
+            "Culture & Essays",
+            &[
+                "essay", "culture", "book", "fiction", "poetry", "film", "music", "art", "review",
+            ],
+        ),
+        (
+            "Niche Corner",
+            &[
+                "hobby",
+                "retro",
+                "keyboard",
+                "board game",
+                "coffee",
+                "e-ink",
+                "eink",
+            ],
+        ),
+        (
+            "Tech & Engineering",
+            &[
+                "tech",
+                "programming",
+                "engineering",
+                "software",
+                "developer",
+                "rust",
+                "linux",
+                "database",
+                "systems",
+                "web",
+            ],
+        ),
+    ];
+    for (section, needles) in RULES {
+        if needles.iter().any(|n| haystack.contains(n))
+            && let Some(found) = sections.iter().find(|s| s.as_str() == *section)
+        {
+            return found.clone();
+        }
+    }
+    default_section(sections)
+}
+
+// ---------------------------------------------------------------------------
+// Response parsing
+// ---------------------------------------------------------------------------
+
+/// Keys the model might wrap the array in.
+const ARRAY_KEYS: &[&str] = &["picks", "lineup", "articles", "selection", "items"];
+
+/// Lenient parse of the stage-B response (§3.6).
+pub fn parse_selection_response(raw: &str) -> Vec<SelectionItem> {
+    let cleaned = strip_code_fence(raw);
+    let value: serde_json::Value = match serde_json::from_str(cleaned) {
+        Ok(v) => v,
+        Err(e) => {
+            tracing::warn!(error = %e, "stage B response was not JSON");
+            return Vec::new();
+        }
+    };
+    let array = match &value {
+        serde_json::Value::Array(items) => Some(items),
+        serde_json::Value::Object(map) => ARRAY_KEYS
+            .iter()
+            .find_map(|k| map.get(*k).and_then(serde_json::Value::as_array))
+            .or_else(|| map.values().find_map(serde_json::Value::as_array)),
+        _ => None,
+    };
+    let Some(array) = array else {
+        tracing::warn!("stage B response contained no array of picks");
+        return Vec::new();
+    };
+
+    let mut out = Vec::with_capacity(array.len());
+    for (idx, item) in array.iter().enumerate() {
+        let Some(obj) = item.as_object() else {
+            tracing::warn!("skipping a non-object stage B pick");
+            continue;
+        };
+        let Some(id) = obj.get("id").and_then(|v| {
+            v.as_i64()
+                .or_else(|| v.as_str().and_then(|s| s.trim().parse().ok()))
+        }) else {
+            tracing::warn!("skipping a stage B pick without an id");
+            continue;
+        };
+        out.push(SelectionItem {
+            id,
+            section: obj
+                .get("section")
+                .and_then(serde_json::Value::as_str)
+                .unwrap_or_default()
+                .trim()
+                .to_string(),
+            position: obj
+                .get("position")
+                .and_then(|v| {
+                    v.as_i64()
+                        .or_else(|| v.as_str().and_then(|s| s.trim().parse().ok()))
+                })
+                .unwrap_or(idx as i64 + 1),
+            lead_story: obj
+                .get("lead_story")
+                .or_else(|| obj.get("is_lead"))
+                .and_then(|v| {
+                    v.as_bool()
+                        .or_else(|| v.as_str().map(|s| s.eq_ignore_ascii_case("true")))
+                })
+                .unwrap_or(false),
+        });
+    }
+    out
+}
+
+// ---------------------------------------------------------------------------
+// Stage driver
+// ---------------------------------------------------------------------------
+
+/// Ask the model for the day's lineup, validating that every section is from the
+/// configured palette and exactly one pick is the lead (§3.6).
+pub async fn select(
+    llm: &LlmClient,
+    candidates: Vec<ScoredArticle>,
+    sections: &[String],
+    target: usize,
+    date: Date,
+) -> Result<Lineup, LlmError> {
+    if candidates.is_empty() {
+        tracing::warn!("stage B had no candidates");
+        return Ok(Lineup {
+            date,
+            picks: Vec::new(),
+            section_order: Vec::new(),
+        });
+    }
+    if let Err(e) = llm.meter.check_budget() {
+        tracing::error!(error = %e,
+            "COST CEILING HIT before stage B selection — falling back to heuristic ranking");
+        return Ok(select_without_llm(candidates, sections, target, date));
+    }
+
+    let shortlist = shortlist(&candidates, target);
+    let prompt = build_prompt(&shortlist, sections, target);
+    tracing::debug!(
+        shortlist = shortlist.len(),
+        approx_tokens = super::approx_tokens(&prompt),
+        "stage B request"
+    );
+
+    let raw = llm.complete(&prompt, llm_temperature(), true).await?;
+    let items = parse_selection_response(&raw);
+    if items.is_empty() {
+        tracing::error!("stage B returned no usable picks; falling back to heuristic ranking");
+        return Ok(select_without_llm(candidates, sections, target, date));
+    }
+
+    let by_id: HashMap<ArticleId, &ScoredArticle> =
+        candidates.iter().map(|c| (c.article.id, c)).collect();
+    let mut chosen: Vec<(SelectionItem, ScoredArticle)> = Vec::with_capacity(items.len());
+    let mut seen: HashSet<ArticleId> = HashSet::new();
+    for item in items {
+        if !seen.insert(item.id) {
+            tracing::warn!(id = item.id, "stage B picked the same article twice");
+            continue;
+        }
+        match by_id.get(&item.id) {
+            Some(candidate) => chosen.push((item, (*candidate).clone())),
+            None => tracing::warn!(id = item.id, "stage B invented an id that was not offered"),
+        }
+    }
+
+    // Auto-include feeds can never be dropped (§3.5).
+    for candidate in &candidates {
+        if candidate.auto_include && seen.insert(candidate.article.id) {
+            tracing::info!(
+                id = candidate.article.id,
+                title = %candidate.article.title,
+                "re-inserting an always-include article the model dropped"
+            );
+            chosen.push((
+                SelectionItem {
+                    id: candidate.article.id,
+                    section: "From the Blogroll".into(),
+                    position: i64::MAX,
+                    lead_story: false,
+                },
+                candidate.clone(),
+            ));
+        }
+    }
+
+    let lineup = assemble(chosen, &candidates, sections, target, date);
+    tracing::info!(
+        picks = lineup.picks.len(),
+        sections = lineup.section_order.len(),
+        lead = lineup.lead().map(|p| p.article.id),
+        "stage B lineup ready"
+    );
+    Ok(lineup)
+}
+
+/// Stage B runs at the scoring temperature: this is a judgement call, not prose.
+fn llm_temperature() -> f32 {
+    0.4
+}
+
+/// Top [`SHORTLIST_SIZE`] candidates by combined score, always including the
+/// auto-includes (§3.6).
+fn shortlist(candidates: &[ScoredArticle], target: usize) -> Vec<ScoredArticle> {
+    let mut ranked: Vec<ScoredArticle> = candidates.to_vec();
+    sort_by_combined(&mut ranked);
+    let keep = SHORTLIST_SIZE.max(target * 2);
+    if ranked.len() <= keep {
+        return ranked;
+    }
+    let (head, tail) = ranked.split_at(keep);
+    let mut out = head.to_vec();
+    out.extend(tail.iter().filter(|c| c.auto_include).cloned());
+    out
+}
+
+fn sort_by_combined(candidates: &mut [ScoredArticle]) {
+    candidates.sort_by(|a, b| {
+        b.combined_score()
+            .partial_cmp(&a.combined_score())
+            .unwrap_or(std::cmp::Ordering::Equal)
+            .then_with(|| a.article.id.cmp(&b.article.id))
+    });
+}
+
+/// Turn validated picks into a [`Lineup`]: clamp the size, force a single lead,
+/// order the sections and renumber positions (§3.6).
+fn assemble(
+    mut chosen: Vec<(SelectionItem, ScoredArticle)>,
+    all: &[ScoredArticle],
+    sections: &[String],
+    target: usize,
+    date: Date,
+) -> Lineup {
+    let (min, max) = size_bounds(target);
+
+    // Too many: drop the weakest non-auto-include picks.
+    if chosen.len() > max {
+        chosen.sort_by(|a, b| {
+            b.1.auto_include.cmp(&a.1.auto_include).then_with(|| {
+                b.1.combined_score()
+                    .partial_cmp(&a.1.combined_score())
+                    .unwrap_or(std::cmp::Ordering::Equal)
+            })
+        });
+        let dropped = chosen.len() - max;
+        chosen.truncate(max);
+        tracing::info!(dropped, max, "trimmed the lineup to the size ceiling");
+    }
+
+    // Too few: top up from the best unpicked candidates.
+    if chosen.len() < min {
+        let taken: HashSet<ArticleId> = chosen.iter().map(|(i, _)| i.id).collect();
+        let mut rest: Vec<ScoredArticle> = all
+            .iter()
+            .filter(|c| !taken.contains(&c.article.id))
+            .cloned()
+            .collect();
+        sort_by_combined(&mut rest);
+        let wanted = min - chosen.len();
+        let added = rest.len().min(wanted);
+        for candidate in rest.into_iter().take(wanted) {
+            let section = heuristic_section(&candidate, sections);
+            chosen.push((
+                SelectionItem {
+                    id: candidate.article.id,
+                    section,
+                    position: i64::MAX,
+                    lead_story: false,
+                },
+                candidate,
+            ));
+        }
+        tracing::info!(added, min, "topped the lineup up to the size floor");
+    }
+
+    // Normalize sections and pick the section order.
+    for (item, _) in chosen.iter_mut() {
+        item.section = resolve_section(&item.section, sections);
+    }
+    let used: HashSet<&str> = chosen.iter().map(|(i, _)| i.section.as_str()).collect();
+    let mut section_order: Vec<String> = sections
+        .iter()
+        .filter(|s| used.contains(s.as_str()))
+        .cloned()
+        .collect();
+    for (item, _) in &chosen {
+        if !section_order.contains(&item.section) {
+            section_order.push(item.section.clone());
+        }
+    }
+    let section_rank: HashMap<&str, usize> = section_order
+        .iter()
+        .enumerate()
+        .map(|(i, s)| (s.as_str(), i))
+        .collect();
+
+    // Order: section, then the model's position, then quality, then id.
+    chosen.sort_by(|a, b| {
+        section_rank
+            .get(a.0.section.as_str())
+            .cmp(&section_rank.get(b.0.section.as_str()))
+            .then_with(|| a.0.position.cmp(&b.0.position))
+            .then_with(|| {
+                b.1.combined_score()
+                    .partial_cmp(&a.1.combined_score())
+                    .unwrap_or(std::cmp::Ordering::Equal)
+            })
+            .then_with(|| a.1.article.id.cmp(&b.1.article.id))
+    });
+
+    // Exactly one lead, and it must live in the first section (§3.6 rule 4).
+    let lead_id = chosen
+        .iter()
+        .find(|(item, _)| item.lead_story)
+        .filter(|(item, _)| section_rank.get(item.section.as_str()) == Some(&0))
+        .or_else(|| chosen.first())
+        .map(|(item, _)| item.id);
+
+    let mut per_section: BTreeMap<String, i64> = BTreeMap::new();
+    let picks = chosen
+        .into_iter()
+        .map(|(item, candidate)| {
+            let position = per_section
+                .entry(item.section.clone())
+                .and_modify(|n| *n += 1)
+                .or_insert(1);
+            Pick {
+                section: item.section,
+                position: *position,
+                is_lead: Some(item.id) == lead_id,
+                summary: None,
+                llm: candidate.llm.clone(),
+                discussion: None,
+                article: candidate.article,
+            }
+        })
+        .collect();
+
+    Lineup {
+        date,
+        picks,
+        section_order,
+    }
+}
+
+/// `--skip-llm` fallback: take the top `target` by prefilter score and bucket them
+/// into sections by feed category (notes §6).
+pub fn select_without_llm(
+    candidates: Vec<ScoredArticle>,
+    sections: &[String],
+    target: usize,
+    date: Date,
+) -> Lineup {
+    let mut ranked = candidates.clone();
+    super::prefilter::sort_by_prefilter(&mut ranked);
+
+    let mut chosen: Vec<(SelectionItem, ScoredArticle)> = Vec::new();
+    let mut seen: HashSet<ArticleId> = HashSet::new();
+    for candidate in ranked.into_iter() {
+        let auto = candidate.auto_include;
+        if chosen.len() >= target && !auto {
+            continue;
+        }
+        if !seen.insert(candidate.article.id) {
+            continue;
+        }
+        let section = heuristic_section(&candidate, sections);
+        chosen.push((
+            SelectionItem {
+                id: candidate.article.id,
+                section,
+                position: chosen.len() as i64 + 1,
+                lead_story: false,
+            },
+            candidate,
+        ));
+    }
+    let lineup = assemble(chosen, &candidates, sections, target, date);
+    tracing::info!(
+        picks = lineup.picks.len(),
+        sections = lineup.section_order.len(),
+        "skip-llm lineup ready"
+    );
+    lineup
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::config::{CurationConfig, DeepseekConfig};
+    use crate::curate::llm::{MockBackend, UsageMeter};
+    use crate::curate::prefilter::tests::article;
+    use crate::types::{LlmScore, TokenUsage};
+    use std::sync::Arc;
+
+    const LINEUP_FIXTURE: &str = include_str!(concat!(
+        env!("CARGO_MANIFEST_DIR"),
+        "/tests/fixtures/deepseek_lineup.json"
+    ));
+
+    fn sections() -> Vec<String> {
+        CurationConfig::default().sections
+    }
+
+    fn date() -> Date {
+        "2026-08-15".parse().expect("date")
+    }
+
+    fn candidate(id: i64, title: &str, words: i64, score: f64) -> ScoredArticle {
+        ScoredArticle {
+            article: article(id, title, words),
+            prefilter_score: 40.0 + score,
+            social_score: 1.0,
+            feed_prior: 0.5,
+            llm: Some(LlmScore {
+                score,
+                category: "Tech & Engineering".into(),
+                rationale: "solid".into(),
+                is_paywalled_guess: false,
+            }),
+            auto_include: false,
+        }
+    }
+
+    fn candidates(n: i64) -> Vec<ScoredArticle> {
+        (1..=n)
+            .map(|i| {
+                candidate(
+                    i,
+                    &format!("Article {i}"),
+                    500 + i * 10,
+                    (10.0 - i as f64 * 0.1).max(0.0),
+                )
+            })
+            .collect()
+    }
+
+    #[test]
+    fn section_resolution_maps_onto_the_palette() {
+        let s = sections();
+        assert_eq!(resolve_section("Top Stories", &s), "Top Stories");
+        assert_eq!(resolve_section("  top stories ", &s), "Top Stories");
+        assert_eq!(
+            resolve_section("Technology & Engineering", &s),
+            "Tech & Engineering"
+        );
+        assert_eq!(resolve_section("Science", &s), "Science & Space");
+        assert_eq!(resolve_section("Sports", &s), "Top Stories");
+        assert_eq!(resolve_section("", &s), "Top Stories");
+        // The reserved section is never allowed through (§3.6).
+        assert_eq!(resolve_section(WORLD_BRIEFING_SECTION, &s), "Top Stories");
+        // A palette without "Top Stories" falls back to its first entry.
+        let tiny = vec!["Niche Corner".to_string()];
+        assert_eq!(resolve_section("Whatever", &tiny), "Niche Corner");
+    }
+
+    #[test]
+    fn heuristic_sections_follow_feed_metadata() {
+        let s = sections();
+        let mut c = candidate(1, "MBTA slow zones, charted", 900, 6.0);
+        c.article.category = Some("News".into());
+        assert_eq!(heuristic_section(&c, &s), "Boston & Local");
+
+        let mut ai = candidate(2, "A new LLM benchmark", 900, 6.0);
+        ai.article.category = Some("Machine Learning".into());
+        assert_eq!(heuristic_section(&ai, &s), "AI & Machine Learning");
+
+        let mut blog = candidate(3, "Notes from my week", 900, 6.0);
+        blog.auto_include = true;
+        assert_eq!(heuristic_section(&blog, &s), "From the Blogroll");
+
+        let mut plain = candidate(4, "Untitled musing", 900, 6.0);
+        plain.article.category = None;
+        plain.article.feed_title = "A Journal".into();
+        assert_eq!(heuristic_section(&plain, &s), "Top Stories");
+    }
+
+    #[test]
+    fn parses_a_realistic_lineup_response() {
+        let items = parse_selection_response(LINEUP_FIXTURE);
+        assert_eq!(items.len(), 6);
+        assert_eq!(items[0].id, 101);
+        assert!(items[0].lead_story);
+        assert_eq!(items[0].section, "Top Stories");
+        assert_eq!(items.iter().filter(|i| i.lead_story).count(), 1);
+        // Junk entries in the fixture are dropped, not fatal.
+        assert!(items.iter().all(|i| i.id != 0));
+    }
+
+    #[test]
+    fn size_bounds_follow_the_spec() {
+        assert_eq!(size_bounds(20), (15, 25));
+        assert_eq!(size_bounds(6), (1, 11));
+        assert_eq!(size_bounds(0), (1, 6));
+    }
+
+    #[tokio::test]
+    async fn selection_builds_a_valid_lineup() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(LINEUP_FIXTURE, TokenUsage::default());
+        let llm = LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), 2.0),
+            backend.clone(),
+        );
+
+        // ids 101..=112 so the fixture's picks resolve.
+        let pool: Vec<ScoredArticle> = (101..=112)
+            .map(|i| candidate(i, &format!("Article {i}"), 800, 7.0))
+            .collect();
+        let lineup = select(&llm, pool, &sections(), 6, date())
+            .await
+            .expect("selection");
+
+        assert_eq!(lineup.date, date());
+        assert_eq!(lineup.picks.len(), 6);
+        assert_eq!(lineup.picks.iter().filter(|p| p.is_lead).count(), 1);
+        assert_eq!(lineup.lead().map(|p| p.article.id), Some(101));
+        // Every section is from the palette and non-empty.
+        for section in &lineup.section_order {
+            assert!(sections().contains(section), "{section} is off-palette");
+            assert!(!lineup.section_picks(section).is_empty());
+        }
+        // Positions restart at 1 inside each section and ascend.
+        for section in &lineup.section_order {
+            let positions: Vec<i64> = lineup
+                .section_picks(section)
+                .iter()
+                .map(|p| p.position)
+                .collect();
+            assert_eq!(
+                positions,
+                (1..=positions.len() as i64).collect::<Vec<_>>(),
+                "{section} positions"
+            );
+        }
+        // The lead sits in the first section used.
+        assert_eq!(
+            lineup.lead().map(|p| p.section.clone()),
+            lineup.section_order.first().cloned()
+        );
+        // The prompt carried the shortlist and the palette.
+        let prompt = &backend.prompts()[0].user;
+        assert!(prompt.starts_with(SELECT_INSTRUCTIONS));
+        assert!(prompt.contains("--- id: 101"));
+        assert!(prompt.contains("never fewer than 1 and never more than 11"));
+    }
+
+    #[tokio::test]
+    async fn hallucinated_ids_and_missing_leads_are_repaired() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(
+            r#"{"picks":[{"id":9999,"section":"Top Stories","position":1,"lead_story":true},
+                         {"id":1,"section":"Sportsball","position":2},
+                         {"id":2,"section":"Niche Corner","position":1}]}"#,
+            TokenUsage::default(),
+        );
+        let llm = LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), 2.0),
+            backend,
+        );
+        let lineup = select(&llm, candidates(6), &sections(), 2, date())
+            .await
+            .expect("selection");
+        assert!(lineup.picks.iter().all(|p| p.article.id != 9999));
+        assert_eq!(lineup.picks.iter().filter(|p| p.is_lead).count(), 1);
+        for pick in &lineup.picks {
+            assert!(sections().contains(&pick.section));
+        }
+    }
+
+    #[tokio::test]
+    async fn oversized_and_undersized_answers_are_clamped() {
+        // Undersized: the model returns one pick but the floor is 5.
+        let backend = Arc::new(MockBackend::new());
+        backend.push(
+            r#"{"picks":[{"id":1,"section":"Top Stories","position":1,"lead_story":true}]}"#,
+            TokenUsage::default(),
+        );
+        let llm = LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), 2.0),
+            backend,
+        );
+        let lineup = select(&llm, candidates(30), &sections(), 10, date())
+            .await
+            .expect("selection");
+        assert!(lineup.picks.len() >= 5, "{}", lineup.picks.len());
+
+        // Oversized: 30 picks against a target of 6 (ceiling 11).
+        let picks: Vec<String> = (1..=30)
+            .map(|i| format!(r#"{{"id":{i},"section":"Top Stories","position":{i}}}"#))
+            .collect();
+        let backend = Arc::new(MockBackend::new());
+        backend.push(
+            format!(r#"{{"picks":[{}]}}"#, picks.join(",")),
+            TokenUsage::default(),
+        );
+        let llm = LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), 2.0),
+            backend,
+        );
+        let lineup = select(&llm, candidates(30), &sections(), 6, date())
+            .await
+            .expect("selection");
+        assert_eq!(lineup.picks.len(), 11);
+    }
+
+    #[tokio::test]
+    async fn always_include_articles_are_reinserted() {
+        let backend = Arc::new(MockBackend::new());
+        backend.push(
+            r#"{"picks":[{"id":1,"section":"Top Stories","position":1,"lead_story":true}]}"#,
+            TokenUsage::default(),
+        );
+        let llm = LlmClient::with_backend(
+            "deepseek-v4-flash",
+            "SYSTEM".into(),
+            UsageMeter::new(&DeepseekConfig::default(), 2.0),
+            backend,
+        );
+        let mut pool = candidates(3);
+        pool[2].auto_include = true;
+        let lineup = select(&llm, pool, &sections(), 1, date())
+            .await
+            .expect("selection");
+        let ids: Vec<ArticleId> = lineup.picks.iter().map(|p| p.article.id).collect();
+        assert!(ids.contains(&3), "auto-include must survive: {ids:?}");
+        assert_eq!(
+            lineup
+                .picks
+                .iter()
+                .find(|p| p.article.id == 3)
+                .map(|p| p.section.as_str()),
+            Some("From the Blogroll")
+        );
+    }
+
+    #[tokio::test]
+    async fn a_tripped_budget_falls_back_without_calling_the_model() {
+        let backend = Arc::new(MockBackend::new());
+        let meter = UsageMeter::new(&DeepseekConfig::default(), 0.001);
+        meter.record(TokenUsage {
+            input_tokens: 1_000_000,
+            cached_tokens: 0,
+            output_tokens: 0,
+        });
+        let llm =
+            LlmClient::with_backend("deepseek-v4-flash", "SYSTEM".into(), meter, backend.clone());
+        let lineup = select(&llm, candidates(20), &sections(), 6, date())
+            .await
+            .expect("fallback");
+        assert_eq!(backend.calls(), 0);
+        assert_eq!(lineup.picks.len(), 6);
+    }
+
+    #[test]
+    fn skip_llm_lineup_uses_prefilter_order() {
+        let mut pool = candidates(10);
+        pool.iter_mut().for_each(|c| c.llm = None);
+        pool[7].prefilter_score = 99.0; // id 8 is the strongest heuristically
+        pool[9].auto_include = true; // id 10 is a personal blog
+        pool[9].prefilter_score = 1.0;
+
+        let lineup = select_without_llm(pool, &sections(), 4, date());
+        assert_eq!(lineup.picks.len(), 5, "4 picks + the auto-include");
+        assert_eq!(lineup.lead().map(|p| p.article.id), Some(8));
+        assert_eq!(lineup.picks.iter().filter(|p| p.is_lead).count(), 1);
+        assert!(
+            lineup
+                .picks
+                .iter()
+                .any(|p| p.article.id == 10 && p.section == "From the Blogroll")
+        );
+        for pick in &lineup.picks {
+            assert!(sections().contains(&pick.section));
+            assert!(pick.summary.is_none());
+        }
+        assert!(!lineup.section_order.is_empty());
+    }
+
+    #[test]
+    fn empty_input_yields_an_empty_lineup() {
+        let lineup = select_without_llm(Vec::new(), &sections(), 20, date());
+        assert!(lineup.picks.is_empty());
+        assert!(lineup.section_order.is_empty());
+        assert!(lineup.lead().is_none());
+    }
+}
diff --git a/src/db.rs b/src/db.rs
new file mode 100644
index 0000000..f6b342b
--- /dev/null
+++ b/src/db.rs
@@ -0,0 +1,1010 @@
+//! SQLite access layer (spec §3.13).
+//!
+//! Runtime queries only — no `sqlx::query!` macros (implementation notes §1).
+//! Timestamps are stored as RFC3339 UTC strings and dates as `YYYY-MM-DD`
+//! (implementation notes §2). Every write is an idempotent upsert so that
+//! `generate --date X` can be re-run safely (implementation notes §12).
+
+use std::path::Path;
+use std::str::FromStr;
+use std::time::Duration;
+
+use jiff::Timestamp;
+use jiff::civil::Date;
+use sqlx::sqlite::{SqliteConnectOptions, SqliteJournalMode, SqlitePoolOptions, SqliteSynchronous};
+use sqlx::{Row, SqlitePool};
+
+use crate::types::{
+    Article, ArticleId, Entry, EntryId, FeedId, FeedPrior, LlmScore, Pick, Rating, SocialRef,
+    SocialSource, SourceRef, Vote,
+};
+
+/// Embedded migrations from `./migrations` (implementation notes §1).
+pub static MIGRATOR: sqlx::migrate::Migrator = sqlx::migrate!("./migrations");
+
+/// `kv` key holding the ingest watermark (§3.1).
+pub const KV_WATERMARK: &str = "ingest_watermark";
+/// `kv` key holding the current taste profile document (§3.6).
+pub const KV_TASTE_PROFILE: &str = "taste_profile";
+/// `kv` key holding the taste profile version/build time (§3.6).
+pub const KV_PROFILE_VERSION: &str = "profile_version";
+
+#[derive(Debug, thiserror::Error)]
+pub enum DbError {
+    #[error("sqlite error: {0}")]
+    Sqlx(#[from] sqlx::Error),
+    #[error("migration error: {0}")]
+    Migrate(#[from] sqlx::migrate::MigrateError),
+    #[error("could not create database directory {path}: {source}")]
+    CreateDir {
+        path: String,
+        #[source]
+        source: std::io::Error,
+    },
+    #[error("malformed value in column `{column}`: {value}")]
+    Decode { column: &'static str, value: String },
+}
+
+type Result<T> = std::result::Result<T, DbError>;
+
+/// Handle to the shared SQLite pool.
+#[derive(Debug, Clone)]
+pub struct Db {
+    pool: SqlitePool,
+}
+
+impl Db {
+    /// Open (creating if needed) the database at `path` with WAL + foreign keys on,
+    /// creating parent directories first. Does **not** run migrations.
+    pub async fn open(path: &Path) -> Result<Self> {
+        if let Some(parent) = path.parent().filter(|p| !p.as_os_str().is_empty()) {
+            std::fs::create_dir_all(parent).map_err(|source| DbError::CreateDir {
+                path: parent.display().to_string(),
+                source,
+            })?;
+        }
+        let opts = SqliteConnectOptions::new()
+            .filename(path)
+            .create_if_missing(true)
+            .foreign_keys(true)
+            .journal_mode(SqliteJournalMode::Wal)
+            .synchronous(SqliteSynchronous::Normal)
+            .busy_timeout(Duration::from_secs(30));
+        let pool = SqlitePoolOptions::new()
+            .max_connections(5)
+            .connect_with(opts)
+            .await?;
+        Ok(Self { pool })
+    }
+
+    /// Open and run all pending migrations — used by every subcommand (§2).
+    pub async fn open_and_migrate(path: &Path) -> Result<Self> {
+        let db = Self::open(path).await?;
+        db.migrate().await?;
+        Ok(db)
+    }
+
+    /// Run the embedded migrations (`daily-epub db migrate`).
+    pub async fn migrate(&self) -> Result<()> {
+        MIGRATOR.run(&self.pool).await?;
+        Ok(())
+    }
+
+    /// Escape hatch for modules that need bespoke queries.
+    pub fn pool(&self) -> &SqlitePool {
+        &self.pool
+    }
+
+    pub async fn close(&self) {
+        self.pool.close().await;
+    }
+
+    // -----------------------------------------------------------------
+    // kv (§3.1 watermark, §3.6 taste profile)
+    // -----------------------------------------------------------------
+
+    pub async fn kv_get(&self, key: &str) -> Result<Option<String>> {
+        let row = sqlx::query("SELECT value FROM kv WHERE key = ?")
+            .bind(key)
+            .fetch_optional(&self.pool)
+            .await?;
+        Ok(row.map(|r| r.get::<String, _>("value")))
+    }
+
+    pub async fn kv_set(&self, key: &str, value: &str) -> Result<()> {
+        sqlx::query(
+            "INSERT INTO kv (key, value) VALUES (?, ?)
+             ON CONFLICT(key) DO UPDATE SET value = excluded.value",
+        )
+        .bind(key)
+        .bind(value)
+        .execute(&self.pool)
+        .await?;
+        Ok(())
+    }
+
+    /// Latest successful ingest watermark (§3.1). The lookback window overlaps it,
+    /// so a missing watermark simply means "use the full lookback window".
+    pub async fn get_watermark(&self) -> Result<Option<Timestamp>> {
+        match self.kv_get(KV_WATERMARK).await? {
+            Some(s) => Ok(Some(parse_ts("watermark", &s)?)),
+            None => Ok(None),
+        }
+    }
+
+    pub async fn set_watermark(&self, ts: Timestamp) -> Result<()> {
+        self.kv_set(KV_WATERMARK, &fmt_ts(ts)).await
+    }
+
+    // -----------------------------------------------------------------
+    // entries (§3.1)
+    // -----------------------------------------------------------------
+
+    /// Upsert one raw Miniflux entry, keyed by the Miniflux entry id (§3.1).
+    pub async fn upsert_entry(&self, entry: &Entry) -> Result<()> {
+        sqlx::query(
+            "INSERT INTO entries (id, feed_id, feed_title, category, title, url, canonical_url,
+                                  author, published_at, comments_url, raw_content, fetched_at)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+             ON CONFLICT(id) DO UPDATE SET
+                 feed_id = excluded.feed_id,
+                 feed_title = excluded.feed_title,
+                 category = excluded.category,
+                 title = excluded.title,
+                 url = excluded.url,
+                 canonical_url = excluded.canonical_url,
+                 author = excluded.author,
+                 published_at = excluded.published_at,
+                 comments_url = excluded.comments_url,
+                 raw_content = excluded.raw_content,
+                 fetched_at = excluded.fetched_at",
+        )
+        .bind(entry.id)
+        .bind(entry.feed_id)
+        .bind(entry.feed_title.as_deref())
+        .bind(entry.category.as_deref())
+        .bind(&entry.title)
+        .bind(&entry.url)
+        .bind(entry.canonical_url.as_deref())
+        .bind(entry.author.as_deref())
+        .bind(entry.published_at.map(fmt_ts))
+        .bind(entry.comments_url.as_deref())
+        .bind(&entry.raw_content)
+        .bind(fmt_ts(entry.fetched_at))
+        .execute(&self.pool)
+        .await?;
+        Ok(())
+    }
+
+    /// Upsert a batch inside one transaction. Returns the number of rows written.
+    pub async fn upsert_entries(&self, entries: &[Entry]) -> Result<usize> {
+        let mut tx = self.pool.begin().await?;
+        for entry in entries {
+            sqlx::query(
+                "INSERT INTO entries (id, feed_id, feed_title, category, title, url, canonical_url,
+                                      author, published_at, comments_url, raw_content, fetched_at)
+                 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+                 ON CONFLICT(id) DO UPDATE SET
+                     feed_id = excluded.feed_id,
+                     feed_title = excluded.feed_title,
+                     category = excluded.category,
+                     title = excluded.title,
+                     url = excluded.url,
+                     canonical_url = excluded.canonical_url,
+                     author = excluded.author,
+                     published_at = excluded.published_at,
+                     comments_url = excluded.comments_url,
+                     raw_content = excluded.raw_content,
+                     fetched_at = excluded.fetched_at",
+            )
+            .bind(entry.id)
+            .bind(entry.feed_id)
+            .bind(entry.feed_title.as_deref())
+            .bind(entry.category.as_deref())
+            .bind(&entry.title)
+            .bind(&entry.url)
+            .bind(entry.canonical_url.as_deref())
+            .bind(entry.author.as_deref())
+            .bind(entry.published_at.map(fmt_ts))
+            .bind(entry.comments_url.as_deref())
+            .bind(&entry.raw_content)
+            .bind(fmt_ts(entry.fetched_at))
+            .execute(&mut *tx)
+            .await?;
+        }
+        tx.commit().await?;
+        Ok(entries.len())
+    }
+
+    /// Entries published within `[since, until]`, newest first (§3.2 input).
+    pub async fn entries_in_window(
+        &self,
+        since: Timestamp,
+        until: Timestamp,
+    ) -> Result<Vec<Entry>> {
+        let rows = sqlx::query(
+            "SELECT id, feed_id, feed_title, category, title, url, canonical_url, author,
+                    published_at, comments_url, raw_content, fetched_at
+             FROM entries
+             WHERE published_at IS NOT NULL AND published_at >= ? AND published_at <= ?
+             ORDER BY published_at DESC",
+        )
+        .bind(fmt_ts(since))
+        .bind(fmt_ts(until))
+        .fetch_all(&self.pool)
+        .await?;
+        rows.iter().map(entry_from_row).collect()
+    }
+
+    pub async fn get_entry(&self, id: EntryId) -> Result<Option<Entry>> {
+        let row = sqlx::query(
+            "SELECT id, feed_id, feed_title, category, title, url, canonical_url, author,
+                    published_at, comments_url, raw_content, fetched_at
+             FROM entries WHERE id = ?",
+        )
+        .bind(id)
+        .fetch_optional(&self.pool)
+        .await?;
+        row.as_ref().map(entry_from_row).transpose()
+    }
+
+    pub async fn count_entries(&self) -> Result<i64> {
+        let row = sqlx::query("SELECT COUNT(*) AS n FROM entries")
+            .fetch_one(&self.pool)
+            .await?;
+        Ok(row.get::<i64, _>("n"))
+    }
+
+    // -----------------------------------------------------------------
+    // articles (§3.2, §3.3)
+    // -----------------------------------------------------------------
+
+    /// Upsert a deduped cluster by canonical URL; returns its `articles.id`.
+    ///
+    /// The denormalized fields on [`Article`] are not stored here — they come
+    /// from the joined `entries` row when loading.
+    pub async fn upsert_article(&self, article: &Article) -> Result<ArticleId> {
+        let sources = serde_json::to_string(&article.sources).unwrap_or_else(|_| "[]".into());
+        let row = sqlx::query(
+            "INSERT INTO articles (canonical_url, title, best_entry_id, content_html, word_count,
+                                   excerpt_only, image_count, sources_json, first_seen)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+             ON CONFLICT(canonical_url) DO UPDATE SET
+                 title = excluded.title,
+                 best_entry_id = excluded.best_entry_id,
+                 content_html = excluded.content_html,
+                 word_count = excluded.word_count,
+                 excerpt_only = excluded.excerpt_only,
+                 image_count = excluded.image_count,
+                 sources_json = excluded.sources_json
+             RETURNING id",
+        )
+        .bind(&article.canonical_url)
+        .bind(&article.title)
+        .bind(article.best_entry_id)
+        .bind(&article.content_html)
+        .bind(article.word_count)
+        .bind(article.excerpt_only)
+        .bind(article.image_count)
+        .bind(sources)
+        .bind(fmt_ts(article.first_seen))
+        .fetch_one(&self.pool)
+        .await?;
+        Ok(row.get::<i64, _>("id"))
+    }
+
+    /// Load one article with its social refs and entry-derived fields.
+    pub async fn get_article(&self, id: ArticleId) -> Result<Option<Article>> {
+        let row = sqlx::query(ARTICLE_SELECT_BY_ID)
+            .bind(id)
+            .fetch_optional(&self.pool)
+            .await?;
+        let Some(row) = row else { return Ok(None) };
+        let mut article = article_from_row(&row)?;
+        article.social = self.social_for_article(article.id).await?;
+        Ok(Some(article))
+    }
+
+    pub async fn article_id_for_url(&self, canonical_url: &str) -> Result<Option<ArticleId>> {
+        let row = sqlx::query("SELECT id FROM articles WHERE canonical_url = ?")
+            .bind(canonical_url)
+            .fetch_optional(&self.pool)
+            .await?;
+        Ok(row.map(|r| r.get::<i64, _>("id")))
+    }
+
+    /// Article ids already published in some issue — never repeat them (§3.5).
+    pub async fn previously_published_ids(&self) -> Result<Vec<ArticleId>> {
+        let rows = sqlx::query("SELECT DISTINCT article_id FROM issue_articles")
+            .fetch_all(&self.pool)
+            .await?;
+        Ok(rows.iter().map(|r| r.get::<i64, _>("article_id")).collect())
+    }
+
+    /// Articles the LLM scored below `threshold` within the last `days` (§3.5).
+    pub async fn recently_low_scored_ids(
+        &self,
+        threshold: f64,
+        since: Date,
+    ) -> Result<Vec<ArticleId>> {
+        let rows = sqlx::query(
+            "SELECT DISTINCT article_id FROM scores
+             WHERE llm_score IS NOT NULL AND llm_score < ? AND run_date >= ?",
+        )
+        .bind(threshold)
+        .bind(since.to_string())
+        .fetch_all(&self.pool)
+        .await?;
+        Ok(rows.iter().map(|r| r.get::<i64, _>("article_id")).collect())
+    }
+
+    // -----------------------------------------------------------------
+    // social (§3.4)
+    // -----------------------------------------------------------------
+
+    pub async fn upsert_social(&self, r: &SocialRef) -> Result<()> {
+        sqlx::query(
+            "INSERT INTO social (article_id, source, item_id, score, num_comments, item_url, fetched_at)
+             VALUES (?, ?, ?, ?, ?, ?, ?)
+             ON CONFLICT(article_id, source) DO UPDATE SET
+                 item_id = excluded.item_id,
+                 score = excluded.score,
+                 num_comments = excluded.num_comments,
+                 item_url = excluded.item_url,
+                 fetched_at = excluded.fetched_at",
+        )
+        .bind(r.article_id)
+        .bind(r.source.as_str())
+        .bind(r.item_id.as_deref())
+        .bind(r.score)
+        .bind(r.num_comments)
+        .bind(r.item_url.as_deref())
+        .bind(fmt_ts(r.fetched_at))
+        .execute(&self.pool)
+        .await?;
+        Ok(())
+    }
+
+    pub async fn social_for_article(&self, article_id: ArticleId) -> Result<Vec<SocialRef>> {
+        let rows = sqlx::query(
+            "SELECT article_id, source, item_id, score, num_comments, item_url, fetched_at
+             FROM social WHERE article_id = ? ORDER BY source",
+        )
+        .bind(article_id)
+        .fetch_all(&self.pool)
+        .await?;
+        rows.iter().map(social_from_row).collect()
+    }
+
+    // -----------------------------------------------------------------
+    // scores (§3.5, §3.6)
+    // -----------------------------------------------------------------
+
+    pub async fn upsert_score(
+        &self,
+        article_id: ArticleId,
+        run_date: Date,
+        prefilter_score: Option<f64>,
+        llm: Option<&LlmScore>,
+    ) -> Result<()> {
+        sqlx::query(
+            "INSERT INTO scores (article_id, run_date, prefilter_score, llm_score, llm_category, rationale)
+             VALUES (?, ?, ?, ?, ?, ?)
+             ON CONFLICT(article_id, run_date) DO UPDATE SET
+                 prefilter_score = COALESCE(excluded.prefilter_score, scores.prefilter_score),
+                 llm_score = COALESCE(excluded.llm_score, scores.llm_score),
+                 llm_category = COALESCE(excluded.llm_category, scores.llm_category),
+                 rationale = COALESCE(excluded.rationale, scores.rationale)",
+        )
+        .bind(article_id)
+        .bind(run_date.to_string())
+        .bind(prefilter_score)
+        .bind(llm.map(|l| l.score))
+        .bind(llm.map(|l| l.category.as_str()))
+        .bind(llm.map(|l| l.rationale.as_str()))
+        .execute(&self.pool)
+        .await?;
+        Ok(())
+    }
+
+    // -----------------------------------------------------------------
+    // issues + lineup (§3.10)
+    // -----------------------------------------------------------------
+
+    /// Issue number = days since the first issue, 1-based (§3.10).
+    pub async fn next_issue_number(&self, date: Date) -> Result<i64> {
+        if let Some(row) = sqlx::query("SELECT issue_number FROM issues WHERE date = ?")
+            .bind(date.to_string())
+            .fetch_optional(&self.pool)
+            .await?
+        {
+            return Ok(row.get::<i64, _>("issue_number"));
+        }
+        let row = sqlx::query("SELECT MIN(date) AS first_date FROM issues")
+            .fetch_one(&self.pool)
+            .await?;
+        let first: Option<String> = row.get("first_date");
+        match first {
+            Some(s) => {
+                let first = parse_date("issues.date", &s)?;
+                Ok((date - first).get_days() as i64 + 1)
+            }
+            None => Ok(1),
+        }
+    }
+
+    #[allow(clippy::too_many_arguments)]
+    pub async fn upsert_issue(
+        &self,
+        date: Date,
+        issue_number: i64,
+        generated_at: Timestamp,
+        epub_path: Option<&str>,
+        x4_path: Option<&str>,
+        xtc_path: Option<&str>,
+        front_page_html: Option<&str>,
+        report_json: Option<&str>,
+    ) -> Result<()> {
+        sqlx::query(
+            "INSERT INTO issues (date, issue_number, generated_at, epub_path, x4_path, xtc_path,
+                                 front_page_html, report_json)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+             ON CONFLICT(date) DO UPDATE SET
+                 issue_number = excluded.issue_number,
+                 generated_at = excluded.generated_at,
+                 epub_path = COALESCE(excluded.epub_path, issues.epub_path),
+                 x4_path = COALESCE(excluded.x4_path, issues.x4_path),
+                 xtc_path = COALESCE(excluded.xtc_path, issues.xtc_path),
+                 front_page_html = COALESCE(excluded.front_page_html, issues.front_page_html),
+                 report_json = COALESCE(excluded.report_json, issues.report_json)",
+        )
+        .bind(date.to_string())
+        .bind(issue_number)
+        .bind(fmt_ts(generated_at))
+        .bind(epub_path)
+        .bind(x4_path)
+        .bind(xtc_path)
+        .bind(front_page_html)
+        .bind(report_json)
+        .execute(&self.pool)
+        .await?;
+        Ok(())
+    }
+
+    /// Replace the lineup for a date (regeneration is idempotent, notes §12).
+    pub async fn replace_issue_articles(&self, date: Date, picks: &[Pick]) -> Result<()> {
+        let mut tx = self.pool.begin().await?;
+        sqlx::query("DELETE FROM issue_articles WHERE issue_date = ?")
+            .bind(date.to_string())
+            .execute(&mut *tx)
+            .await?;
+        for pick in picks {
+            sqlx::query(
+                "INSERT INTO issue_articles (issue_date, article_id, section, position, is_lead, summary)
+                 VALUES (?, ?, ?, ?, ?, ?)",
+            )
+            .bind(date.to_string())
+            .bind(pick.article.id)
+            .bind(&pick.section)
+            .bind(pick.position)
+            .bind(pick.is_lead)
+            .bind(pick.summary.as_deref())
+            .execute(&mut *tx)
+            .await?;
+        }
+        tx.commit().await?;
+        Ok(())
+    }
+
+    /// Recent issue dates + stored report JSON, newest first (`GET /issues.json`, §3.12).
+    pub async fn recent_reports(&self, limit: i64) -> Result<Vec<(Date, Option<String>)>> {
+        let rows = sqlx::query("SELECT date, report_json FROM issues ORDER BY date DESC LIMIT ?")
+            .bind(limit)
+            .fetch_all(&self.pool)
+            .await?;
+        rows.iter()
+            .map(|r| {
+                let d = parse_date("issues.date", &r.get::<String, _>("date"))?;
+                Ok((d, r.get::<Option<String>, _>("report_json")))
+            })
+            .collect()
+    }
+
+    /// Issues older than `cutoff`, used by retention pruning (§3.11).
+    pub async fn issues_before(
+        &self,
+        cutoff: Date,
+    ) -> Result<Vec<(Date, Option<String>, Option<String>, Option<String>)>> {
+        let rows = sqlx::query(
+            "SELECT date, epub_path, x4_path, xtc_path FROM issues WHERE date < ? ORDER BY date",
+        )
+        .bind(cutoff.to_string())
+        .fetch_all(&self.pool)
+        .await?;
+        rows.iter()
+            .map(|r| {
+                let d = parse_date("issues.date", &r.get::<String, _>("date"))?;
+                Ok((
+                    d,
+                    r.get::<Option<String>, _>("epub_path"),
+                    r.get::<Option<String>, _>("x4_path"),
+                    r.get::<Option<String>, _>("xtc_path"),
+                ))
+            })
+            .collect()
+    }
+
+    // -----------------------------------------------------------------
+    // ratings + feed priors (§3.9)
+    // -----------------------------------------------------------------
+
+    /// Idempotent upsert of a reader vote (§3.9). Returns true if it changed anything.
+    pub async fn upsert_rating(&self, rating: &Rating) -> Result<bool> {
+        let res = sqlx::query(
+            "INSERT INTO ratings (issue_date, article_id, vote, rated_at)
+             VALUES (?, ?, ?, ?)
+             ON CONFLICT(issue_date, article_id) DO UPDATE SET
+                 vote = excluded.vote,
+                 rated_at = excluded.rated_at
+             WHERE ratings.vote != excluded.vote",
+        )
+        .bind(rating.issue_date.to_string())
+        .bind(rating.article_id)
+        .bind(rating.vote.as_i64())
+        .bind(fmt_ts(rating.rated_at))
+        .execute(&self.pool)
+        .await?;
+        Ok(res.rows_affected() > 0)
+    }
+
+    /// Every rating joined to the feed that carried the article (§3.9 priors).
+    pub async fn ratings_with_feed(&self) -> Result<Vec<(FeedId, Vote)>> {
+        let rows = sqlx::query(
+            "SELECT e.feed_id AS feed_id, r.vote AS vote
+             FROM ratings r
+             JOIN articles a ON a.id = r.article_id
+             JOIN entries e ON e.id = a.best_entry_id",
+        )
+        .fetch_all(&self.pool)
+        .await?;
+        Ok(rows
+            .iter()
+            .map(|r| {
+                let vote = if r.get::<i64, _>("vote") >= 0 {
+                    Vote::Up
+                } else {
+                    Vote::Down
+                };
+                (r.get::<i64, _>("feed_id"), vote)
+            })
+            .collect())
+    }
+
+    /// Recent ratings with article titles, for the weekly profile rewrite (§3.6).
+    pub async fn recent_ratings_detailed(&self, since: Date) -> Result<Vec<(Rating, String)>> {
+        let rows = sqlx::query(
+            "SELECT r.issue_date AS issue_date, r.article_id AS article_id, r.vote AS vote,
+                    r.rated_at AS rated_at, a.title AS title
+             FROM ratings r JOIN articles a ON a.id = r.article_id
+             WHERE r.issue_date >= ? ORDER BY r.rated_at DESC",
+        )
+        .bind(since.to_string())
+        .fetch_all(&self.pool)
+        .await?;
+        rows.iter()
+            .map(|r| {
+                let rating = Rating {
+                    issue_date: parse_date(
+                        "ratings.issue_date",
+                        &r.get::<String, _>("issue_date"),
+                    )?,
+                    article_id: r.get::<i64, _>("article_id"),
+                    vote: if r.get::<i64, _>("vote") >= 0 {
+                        Vote::Up
+                    } else {
+                        Vote::Down
+                    },
+                    rated_at: parse_ts("ratings.rated_at", &r.get::<String, _>("rated_at"))?,
+                };
+                Ok((rating, r.get::<String, _>("title")))
+            })
+            .collect()
+    }
+
+    pub async fn upsert_feed_prior(&self, prior: &FeedPrior) -> Result<()> {
+        sqlx::query(
+            "INSERT INTO feed_priors (feed_id, upvotes, downvotes, included)
+             VALUES (?, ?, ?, ?)
+             ON CONFLICT(feed_id) DO UPDATE SET
+                 upvotes = excluded.upvotes,
+                 downvotes = excluded.downvotes,
+                 included = excluded.included",
+        )
+        .bind(prior.feed_id)
+        .bind(prior.upvotes)
+        .bind(prior.downvotes)
+        .bind(prior.included)
+        .execute(&self.pool)
+        .await?;
+        Ok(())
+    }
+
+    pub async fn feed_priors(&self) -> Result<Vec<FeedPrior>> {
+        let rows = sqlx::query("SELECT feed_id, upvotes, downvotes, included FROM feed_priors")
+            .fetch_all(&self.pool)
+            .await?;
+        Ok(rows
+            .iter()
+            .map(|r| FeedPrior {
+                feed_id: r.get::<i64, _>("feed_id"),
+                upvotes: r.get::<i64, _>("upvotes"),
+                downvotes: r.get::<i64, _>("downvotes"),
+                included: r.get::<i64, _>("included"),
+            })
+            .collect())
+    }
+
+    // -----------------------------------------------------------------
+    // runs (§3.6 cost guardrail, §3.13)
+    // -----------------------------------------------------------------
+
+    /// Insert a `running` row at the top of `generate`; returns `runs.id`.
+    pub async fn start_run(&self, date: Date, started_at: Timestamp) -> Result<i64> {
+        let row = sqlx::query(
+            "INSERT INTO runs (date, started_at, status) VALUES (?, ?, 'running') RETURNING id",
+        )
+        .bind(date.to_string())
+        .bind(fmt_ts(started_at))
+        .fetch_one(&self.pool)
+        .await?;
+        Ok(row.get::<i64, _>("id"))
+    }
+
+    /// Write the final counters/status for a run (§3.13).
+    pub async fn finish_run(&self, id: i64, report: &crate::report::RunReport) -> Result<()> {
+        sqlx::query(
+            "UPDATE runs SET finished_at = ?, entries_fetched = ?, candidates = ?, selected = ?,
+                             input_tokens = ?, cached_tokens = ?, output_tokens = ?, cost_usd = ?,
+                             status = ?, error = ?
+             WHERE id = ?",
+        )
+        .bind(report.finished_at.map(fmt_ts))
+        .bind(report.counts.entries_fetched)
+        .bind(report.counts.candidates)
+        .bind(report.counts.selected)
+        .bind(report.usage.input_tokens)
+        .bind(report.usage.cached_tokens)
+        .bind(report.usage.output_tokens)
+        .bind(report.cost_usd)
+        .bind(report.status.as_str())
+        .bind(report.error.as_deref())
+        .bind(id)
+        .execute(&self.pool)
+        .await?;
+        Ok(())
+    }
+
+    /// Total spend recorded for a date, for the `max_daily_usd` guardrail (§3.6).
+    pub async fn spend_for_date(&self, date: Date) -> Result<f64> {
+        let row =
+            sqlx::query("SELECT COALESCE(SUM(cost_usd), 0.0) AS total FROM runs WHERE date = ?")
+                .bind(date.to_string())
+                .fetch_one(&self.pool)
+                .await?;
+        Ok(row.get::<f64, _>("total"))
+    }
+}
+
+/// Joined projection used by [`Db::get_article`]; keep in sync with [`article_from_row`].
+const ARTICLE_SELECT_BY_ID: &str = "\
+SELECT a.id AS id, a.canonical_url AS canonical_url, a.title AS title,
+       a.best_entry_id AS best_entry_id, a.content_html AS content_html,
+       a.word_count AS word_count, a.excerpt_only AS excerpt_only,
+       a.image_count AS image_count, a.sources_json AS sources_json,
+       a.first_seen AS first_seen,
+       e.url AS entry_url, e.author AS author, e.feed_id AS feed_id,
+       e.feed_title AS feed_title, e.category AS category,
+       e.published_at AS published_at, e.comments_url AS comments_url
+  FROM articles a LEFT JOIN entries e ON e.id = a.best_entry_id
+ WHERE a.id = ?";
+
+// ---------------------------------------------------------------------------
+// Row mapping helpers (implementation notes §1: manual mapping, no macros)
+// ---------------------------------------------------------------------------
+
+/// RFC3339 UTC, the on-disk timestamp format (notes §2).
+pub fn fmt_ts(ts: Timestamp) -> String {
+    ts.to_string()
+}
+
+pub fn parse_ts(column: &'static str, value: &str) -> Result<Timestamp> {
+    Timestamp::from_str(value).map_err(|_| DbError::Decode {
+        column,
+        value: value.to_string(),
+    })
+}
+
+pub fn parse_date(column: &'static str, value: &str) -> Result<Date> {
+    Date::from_str(value).map_err(|_| DbError::Decode {
+        column,
+        value: value.to_string(),
+    })
+}
+
+fn entry_from_row(row: &sqlx::sqlite::SqliteRow) -> Result<Entry> {
+    Ok(Entry {
+        id: row.get("id"),
+        feed_id: row.get("feed_id"),
+        feed_title: row.get("feed_title"),
+        category: row.get("category"),
+        title: row.get("title"),
+        url: row.get("url"),
+        canonical_url: row.get("canonical_url"),
+        author: row.get("author"),
+        published_at: row
+            .get::<Option<String>, _>("published_at")
+            .map(|s| parse_ts("entries.published_at", &s))
+            .transpose()?,
+        comments_url: row.get("comments_url"),
+        raw_content: row.get("raw_content"),
+        fetched_at: parse_ts("entries.fetched_at", &row.get::<String, _>("fetched_at"))?,
+    })
+}
+
+fn article_from_row(row: &sqlx::sqlite::SqliteRow) -> Result<Article> {
+    let sources: Vec<SourceRef> =
+        serde_json::from_str(&row.get::<String, _>("sources_json")).unwrap_or_default();
+    Ok(Article {
+        id: row.get("id"),
+        canonical_url: row.get("canonical_url"),
+        title: row.get::<Option<String>, _>("title").unwrap_or_default(),
+        best_entry_id: row.get::<Option<i64>, _>("best_entry_id").unwrap_or(0),
+        content_html: row
+            .get::<Option<String>, _>("content_html")
+            .unwrap_or_default(),
+        word_count: row.get("word_count"),
+        excerpt_only: row.get("excerpt_only"),
+        image_count: row.get("image_count"),
+        sources,
+        first_seen: parse_ts("articles.first_seen", &row.get::<String, _>("first_seen"))?,
+        url: row
+            .get::<Option<String>, _>("entry_url")
+            .unwrap_or_else(|| row.get("canonical_url")),
+        author: row.get("author"),
+        feed_id: row.get::<Option<i64>, _>("feed_id").unwrap_or(0),
+        feed_title: row
+            .get::<Option<String>, _>("feed_title")
+            .unwrap_or_default(),
+        category: row.get("category"),
+        published_at: row
+            .get::<Option<String>, _>("published_at")
+            .map(|s| parse_ts("entries.published_at", &s))
+            .transpose()?,
+        comments_url: row.get("comments_url"),
+        image_urls: Vec::new(),
+        social: Vec::new(),
+        extract_method: crate::types::ExtractMethod::Miniflux,
+    })
+}
+
+fn social_from_row(row: &sqlx::sqlite::SqliteRow) -> Result<SocialRef> {
+    let raw: String = row.get("source");
+    let source = SocialSource::parse(&raw).ok_or(DbError::Decode {
+        column: "social.source",
+        value: raw,
+    })?;
+    Ok(SocialRef {
+        article_id: row.get("article_id"),
+        source,
+        item_id: row.get("item_id"),
+        score: row.get("score"),
+        num_comments: row.get("num_comments"),
+        item_url: row.get("item_url"),
+        fetched_at: parse_ts("social.fetched_at", &row.get::<String, _>("fetched_at"))?,
+    })
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::types::ExtractMethod;
+
+    fn ts(s: &str) -> Timestamp {
+        s.parse().unwrap()
+    }
+
+    fn sample_entry(id: EntryId) -> Entry {
+        Entry {
+            id,
+            feed_id: 7,
+            feed_title: Some("Hacker News".into()),
+            category: Some("Tech".into()),
+            title: format!("Story {id}"),
+            url: format!("https://example.com/{id}"),
+            canonical_url: Some(format!("https://example.com/{id}")),
+            author: Some("someone".into()),
+            published_at: Some(ts("2026-08-15T04:00:00Z")),
+            comments_url: Some("https://news.ycombinator.com/item?id=1".into()),
+            raw_content: "<p>hello</p>".into(),
+            fetched_at: ts("2026-08-15T05:30:00Z"),
+        }
+    }
+
+    async fn temp_db() -> (tempfile::TempDir, Db) {
+        let dir = tempfile::tempdir().unwrap();
+        let path = dir.path().join("nested").join("daily-epub.db");
+        let db = Db::open_and_migrate(&path).await.unwrap();
+        (dir, db)
+    }
+
+    #[tokio::test]
+    async fn open_creates_dirs_and_migrates() {
+        let (dir, db) = temp_db().await;
+        assert!(dir.path().join("nested").join("daily-epub.db").exists());
+        // Migrations are idempotent.
+        db.migrate().await.unwrap();
+        assert_eq!(db.count_entries().await.unwrap(), 0);
+
+        let row = sqlx::query("PRAGMA journal_mode")
+            .fetch_one(db.pool())
+            .await
+            .unwrap();
+        assert_eq!(row.get::<String, _>(0).to_lowercase(), "wal");
+        let row = sqlx::query("PRAGMA foreign_keys")
+            .fetch_one(db.pool())
+            .await
+            .unwrap();
+        assert_eq!(row.get::<i64, _>(0), 1);
+    }
+
+    #[tokio::test]
+    async fn entry_upsert_is_idempotent() {
+        let (_dir, db) = temp_db().await;
+        db.upsert_entries(&[sample_entry(1), sample_entry(2)])
+            .await
+            .unwrap();
+        db.upsert_entries(&[sample_entry(1)]).await.unwrap();
+        assert_eq!(db.count_entries().await.unwrap(), 2);
+
+        let mut changed = sample_entry(1);
+        changed.title = "Renamed".into();
+        db.upsert_entry(&changed).await.unwrap();
+        let got = db.get_entry(1).await.unwrap().unwrap();
+        assert_eq!(got.title, "Renamed");
+        assert_eq!(got, changed);
+
+        let window = db
+            .entries_in_window(ts("2026-08-14T00:00:00Z"), ts("2026-08-16T00:00:00Z"))
+            .await
+            .unwrap();
+        assert_eq!(window.len(), 2);
+    }
+
+    #[tokio::test]
+    async fn kv_watermark_round_trip() {
+        let (_dir, db) = temp_db().await;
+        assert!(db.get_watermark().await.unwrap().is_none());
+        let t = ts("2026-08-15T05:30:00Z");
+        db.set_watermark(t).await.unwrap();
+        assert_eq!(db.get_watermark().await.unwrap(), Some(t));
+        db.kv_set("taste_profile", "hello").await.unwrap();
+        assert_eq!(
+            db.kv_get("taste_profile").await.unwrap().as_deref(),
+            Some("hello")
+        );
+    }
+
+    #[tokio::test]
+    async fn article_and_social_round_trip() {
+        let (_dir, db) = temp_db().await;
+        db.upsert_entry(&sample_entry(1)).await.unwrap();
+        let article = Article {
+            id: 0,
+            canonical_url: "https://example.com/1".into(),
+            title: "Story 1".into(),
+            best_entry_id: 1,
+            content_html: "<p>body</p>".into(),
+            word_count: 900,
+            excerpt_only: false,
+            image_count: 2,
+            sources: vec![SourceRef {
+                entry_id: 1,
+                feed_id: 7,
+                feed_title: "Hacker News".into(),
+                category: Some("Tech".into()),
+                kind: crate::types::SourceKind::HnFrontpage,
+            }],
+            first_seen: ts("2026-08-15T05:30:00Z"),
+            url: "https://example.com/1".into(),
+            author: None,
+            feed_id: 7,
+            feed_title: "Hacker News".into(),
+            category: None,
+            published_at: None,
+            comments_url: None,
+            image_urls: vec![],
+            social: vec![],
+            extract_method: ExtractMethod::Miniflux,
+        };
+        let id = db.upsert_article(&article).await.unwrap();
+        assert_eq!(db.upsert_article(&article).await.unwrap(), id);
+
+        db.upsert_social(&SocialRef {
+            article_id: id,
+            source: SocialSource::Hn,
+            item_id: Some("42".into()),
+            score: 342,
+            num_comments: 210,
+            item_url: Some("https://news.ycombinator.com/item?id=42".into()),
+            fetched_at: ts("2026-08-15T05:31:00Z"),
+        })
+        .await
+        .unwrap();
+
+        let loaded = db.get_article(id).await.unwrap().unwrap();
+        assert_eq!(loaded.word_count, 900);
+        assert_eq!(loaded.sources.len(), 1);
+        assert_eq!(loaded.social.len(), 1);
+        assert_eq!(loaded.social[0].score, 342);
+        assert_eq!(loaded.feed_title, "Hacker News");
+        assert_eq!(
+            db.article_id_for_url("https://example.com/1")
+                .await
+                .unwrap(),
+            Some(id)
+        );
+    }
+
+    #[tokio::test]
+    async fn runs_and_issue_numbers() {
+        let (_dir, db) = temp_db().await;
+        let date: Date = "2026-08-15".parse().unwrap();
+        assert_eq!(db.next_issue_number(date).await.unwrap(), 1);
+        let run_id = db
+            .start_run(date, ts("2026-08-15T05:30:00Z"))
+            .await
+            .unwrap();
+
+        let mut report = crate::report::RunReport::new(date, ts("2026-08-15T05:30:00Z"));
+        report.counts.entries_fetched = 412;
+        report.counts.candidates = 120;
+        report.counts.selected = 20;
+        report.finish(ts("2026-08-15T05:36:00Z"), 0.14, 0.0028, 0.28);
+        db.finish_run(run_id, &report).await.unwrap();
+
+        db.upsert_issue(
+            date,
+            1,
+            ts("2026-08-15T05:36:00Z"),
+            None,
+            None,
+            None,
+            None,
+            Some("{}"),
+        )
+        .await
+        .unwrap();
+        let next: Date = "2026-08-16".parse().unwrap();
+        assert_eq!(db.next_issue_number(next).await.unwrap(), 2);
+        assert_eq!(db.recent_reports(5).await.unwrap().len(), 1);
+        assert_eq!(db.spend_for_date(date).await.unwrap(), 0.0);
+    }
+
+    #[tokio::test]
+    async fn ratings_upsert_is_idempotent() {
+        let (_dir, db) = temp_db().await;
+        let rating = Rating {
+            issue_date: "2026-08-15".parse().unwrap(),
+            article_id: 1,
+            vote: Vote::Up,
+            rated_at: ts("2026-08-15T12:00:00Z"),
+        };
+        assert!(db.upsert_rating(&rating).await.unwrap());
+        assert!(!db.upsert_rating(&rating).await.unwrap());
+        let flipped = Rating {
+            vote: Vote::Down,
+            ..rating.clone()
+        };
+        assert!(db.upsert_rating(&flipped).await.unwrap());
+    }
+}
diff --git a/src/dedupe.rs b/src/dedupe.rs
new file mode 100644
index 0000000..77fd486
--- /dev/null
+++ b/src/dedupe.rs
@@ -0,0 +1,655 @@
+//! Normalization and duplicate clustering (spec §3.2).
+//!
+//! Canonicalizes URLs, clusters entries that tell the same story (HN frontpage feed
+//! + Scour feed + the blog's own feed), and drops obvious non-articles.
+
+use std::collections::HashMap;
+
+use jiff::Timestamp;
+use url::Url;
+
+use crate::types::{Article, Entry, ExtractMethod, SourceKind, SourceRef};
+
+/// Query parameters stripped during canonicalization (§3.2).
+pub const TRACKING_PARAMS: &[&str] = &["ref", "fbclid", "gclid", "s", "si", "mc_cid", "mc_eid"];
+
+/// URL hosts that are never articles (§3.2).
+pub const NON_ARTICLE_HOSTS: &[&str] = &[
+    "youtube.com",
+    "www.youtube.com",
+    "youtu.be",
+    "vimeo.com",
+    "open.spotify.com",
+    "podcasts.apple.com",
+];
+
+/// Path suffixes that mark an audio/video enclosure rather than an article (§3.2).
+const MEDIA_EXTENSIONS: &[&str] = &[
+    ".mp3", ".m4a", ".m4v", ".mp4", ".ogg", ".oga", ".opus", ".wav", ".flac", ".aac", ".mov",
+    ".webm", ".mkv",
+];
+
+/// How many redirector hops [`canonical_url`] will follow before giving up (§3.2).
+const MAX_REDIRECT_DEPTH: u8 = 3;
+
+/// Minimum length of a [`normalized_title`] before it may merge two clusters.
+/// Short titles ("News", "Weekly") collide far too easily (§3.2 secondary pass).
+const MIN_TITLE_KEY_LEN: usize = 12;
+
+/// Canonicalize a URL: lowercase host, drop the fragment, strip tracking params
+/// (`utm_*` and [`TRACKING_PARAMS`]), trim the trailing slash, and resolve known
+/// redirectors such as Google News links to their target (§3.2).
+///
+/// Returns `None` when the input is not a parseable absolute http(s) URL.
+pub fn canonical_url(raw: &str) -> Option<String> {
+    canonicalize(raw, 0)
+}
+
+fn canonicalize(raw: &str, depth: u8) -> Option<String> {
+    let trimmed = raw.trim();
+    if trimmed.is_empty() {
+        return None;
+    }
+    let mut url = Url::parse(trimmed).ok()?;
+    if !matches!(url.scheme(), "http" | "https") {
+        return None;
+    }
+    url.host_str()?;
+
+    // Known redirectors (Google News et al) carry the real article in a param.
+    if depth < MAX_REDIRECT_DEPTH
+        && let Some(target) = redirect_target(&url)
+        && let Some(resolved) = canonicalize(&target, depth + 1)
+    {
+        return Some(resolved);
+    }
+
+    url.set_fragment(None);
+
+    if let Some(host) = url.host_str() {
+        let lower = host.to_ascii_lowercase();
+        if lower != host {
+            url.set_host(Some(&lower)).ok()?;
+        }
+    }
+
+    let kept: Vec<(String, String)> = url
+        .query_pairs()
+        .filter(|(k, _)| !is_tracking_param(k))
+        .map(|(k, v)| (k.into_owned(), v.into_owned()))
+        .collect();
+    if kept.is_empty() {
+        url.set_query(None);
+    } else {
+        let mut pairs = url.query_pairs_mut();
+        pairs.clear();
+        for (k, v) in &kept {
+            pairs.append_pair(k, v);
+        }
+        drop(pairs);
+    }
+
+    let path = url.path().to_string();
+    if path.len() > 1 && path.ends_with('/') {
+        url.set_path(path.trim_end_matches('/'));
+    }
+
+    let mut out = url.to_string();
+    if url.query().is_none() && out.ends_with('/') {
+        out.pop();
+    }
+    Some(out)
+}
+
+fn is_tracking_param(key: &str) -> bool {
+    let key = key.to_ascii_lowercase();
+    key.starts_with("utm_") || TRACKING_PARAMS.contains(&key.as_str())
+}
+
+/// The real destination behind a known redirector, if any (§3.2).
+fn redirect_target(url: &Url) -> Option<String> {
+    let host = url.host_str()?.to_ascii_lowercase();
+    let is_google_news = host == "news.google.com" || host.ends_with(".news.google.com");
+    let is_google_redirect = host == "news.url.google.com"
+        || ((host == "www.google.com" || host == "google.com") && url.path() == "/url");
+    if !(is_google_news || is_google_redirect) {
+        return None;
+    }
+    url.query_pairs()
+        .find(|(k, _)| k == "url" || k == "q")
+        .map(|(_, v)| v.into_owned())
+        .filter(|v| v.starts_with("http"))
+}
+
+/// Title normalized for the fuzzy second dedupe pass: lowercased, alphanumeric only (§3.2).
+pub fn normalized_title(title: &str) -> String {
+    title
+        .chars()
+        .filter(|c| c.is_alphanumeric())
+        .flat_map(|c| c.to_lowercase())
+        .collect()
+}
+
+/// True for entries that are not articles at all: media-enclosure-only items,
+/// [`NON_ARTICLE_HOSTS`], empty titles (§3.2).
+pub fn is_non_article(entry: &Entry) -> bool {
+    if entry.title.trim().is_empty() {
+        return true;
+    }
+    let Some(url) = Url::parse(entry.url.trim()).ok().filter(|u| {
+        matches!(u.scheme(), "http" | "https") && u.host_str().is_some_and(|h| !h.is_empty())
+    }) else {
+        return true;
+    };
+    let host = url.host_str().unwrap_or_default().to_ascii_lowercase();
+    if NON_ARTICLE_HOSTS
+        .iter()
+        .any(|blocked| host == *blocked || host.ends_with(&format!(".{blocked}")))
+    {
+        return true;
+    }
+    let path = url.path().to_ascii_lowercase();
+    if MEDIA_EXTENSIONS.iter().any(|ext| path.ends_with(ext)) {
+        return true;
+    }
+    is_enclosure_only(&entry.raw_content)
+}
+
+/// Content that is nothing but an embedded player has no text worth reading (§3.2).
+fn is_enclosure_only(raw_content: &str) -> bool {
+    let lower = raw_content.to_ascii_lowercase();
+    let embeds = lower.contains("<audio")
+        || lower.contains("<video")
+        || lower.contains("<embed")
+        || lower.contains("<iframe");
+    embeds && crate::extract::word_count(raw_content) < 25
+}
+
+/// Classify which kind of feed an entry arrived through, for the sources list (§3.2, §3.5).
+pub fn classify_source(entry: &Entry) -> SourceKind {
+    classify_source_with_feed(entry, None)
+}
+
+/// [`classify_source`] with the feed's own URL/site URL when the caller has it.
+///
+/// The `entries` table does not store the feed URL, so the entry-only form falls
+/// back to the feed title plus the entry/comments URLs (§3.2).
+pub fn classify_source_with_feed(entry: &Entry, feed_url_or_site: Option<&str>) -> SourceKind {
+    let mut haystack = String::new();
+    if let Some(feed) = feed_url_or_site {
+        haystack.push_str(&feed.to_ascii_lowercase());
+        haystack.push(' ');
+    }
+    if let Some(title) = &entry.feed_title {
+        haystack.push_str(&title.to_ascii_lowercase());
+        haystack.push(' ');
+    }
+    if let Some(category) = &entry.category {
+        haystack.push_str(&category.to_ascii_lowercase());
+        haystack.push(' ');
+    }
+    let comments = entry
+        .comments_url
+        .as_deref()
+        .unwrap_or("")
+        .to_ascii_lowercase();
+    let url = entry.url.to_ascii_lowercase();
+
+    if haystack.contains("scour.ing") || haystack.contains("scour") {
+        return SourceKind::Scour;
+    }
+    if haystack.contains("hnrss")
+        || haystack.contains("news.ycombinator")
+        || haystack.contains("hacker news")
+        || comments.contains("news.ycombinator.com")
+    {
+        return SourceKind::HnFrontpage;
+    }
+    if haystack.contains("lobste.rs")
+        || haystack.contains("lobsters")
+        || comments.contains("lobste.rs")
+        || url.contains("lobste.rs/s/")
+    {
+        return SourceKind::Lobsters;
+    }
+    if haystack.contains("reddit.com")
+        || haystack.contains("reddit")
+        || comments.contains("reddit.com")
+        || url.contains("reddit.com/r/")
+    {
+        return SourceKind::Reddit;
+    }
+    SourceKind::Feed
+}
+
+/// `feed_id → feed URL (or site URL)`, as built by [`crate::miniflux::feed_urls`].
+///
+/// Passing it into [`cluster_with_feeds`] is what makes "came via Scour" exact:
+/// a Scour interest feed is only recognizable from its `feed_url`, and the
+/// `entries` table does not store one (§3.2).
+pub type FeedUrls = HashMap<crate::types::FeedId, String>;
+
+/// Build a [`SourceRef`] describing how `entry` reached us.
+pub fn source_ref(entry: &Entry) -> SourceRef {
+    source_ref_with_feeds(entry, &FeedUrls::new())
+}
+
+/// [`source_ref`] with the run's `feed_id → feed url` map for exact classification.
+pub fn source_ref_with_feeds(entry: &Entry, feed_urls: &FeedUrls) -> SourceRef {
+    SourceRef {
+        entry_id: entry.id,
+        feed_id: entry.feed_id,
+        feed_title: entry
+            .feed_title
+            .clone()
+            .filter(|t| !t.trim().is_empty())
+            .unwrap_or_else(|| format!("feed {}", entry.feed_id)),
+        category: entry.category.clone(),
+        kind: classify_source_with_feed(entry, feed_urls.get(&entry.feed_id).map(String::as_str)),
+    }
+}
+
+/// Outcome of the dedupe stage.
+#[derive(Debug, Clone, Default)]
+pub struct DedupeStats {
+    pub entries_in: usize,
+    pub dropped_non_article: usize,
+    pub clusters: usize,
+    /// Clusters that merged more than one entry.
+    pub merged: usize,
+}
+
+/// Cluster `entries` into [`Article`]s: primary key is the canonical URL, secondary
+/// pass matches [`normalized_title`] within the window. Each cluster keeps the
+/// richest content, the union of source refs and the earliest `first_seen` (§3.2).
+///
+/// The returned articles have `id == 0` (not yet persisted) and carry the richest
+/// *raw* Miniflux content in `content_html`; [`crate::extract`] replaces it with the
+/// sanitized body and the real `word_count`.
+pub fn cluster(entries: Vec<Entry>) -> (Vec<Article>, DedupeStats) {
+    cluster_with_feeds(entries, &FeedUrls::new())
+}
+
+/// [`cluster`] with the run's `feed_id → feed url` map, so `SourceKind::Scour`
+/// (and the other feed-shaped kinds) are detected from the feed URL rather than
+/// guessed from the feed title (§3.2).
+pub fn cluster_with_feeds(
+    entries: Vec<Entry>,
+    feed_urls: &FeedUrls,
+) -> (Vec<Article>, DedupeStats) {
+    let span = tracing::info_span!("dedupe", entries = entries.len());
+    let _guard = span.enter();
+
+    let mut stats = DedupeStats {
+        entries_in: entries.len(),
+        ..DedupeStats::default()
+    };
+
+    let mut clusters: Vec<Vec<(Entry, String)>> = Vec::new();
+    let mut by_url: HashMap<String, usize> = HashMap::new();
+    let mut by_title: HashMap<String, usize> = HashMap::new();
+
+    for entry in entries {
+        if is_non_article(&entry) {
+            stats.dropped_non_article += 1;
+            continue;
+        }
+        let Some(canon) = canonical_url(&entry.url) else {
+            stats.dropped_non_article += 1;
+            continue;
+        };
+        let title_key = normalized_title(&entry.title);
+        let title_key = (title_key.len() >= MIN_TITLE_KEY_LEN).then_some(title_key);
+
+        let index = match by_url.get(&canon) {
+            Some(&i) => i,
+            None => match title_key.as_ref().and_then(|k| by_title.get(k)) {
+                Some(&i) => i,
+                None => {
+                    clusters.push(Vec::new());
+                    clusters.len() - 1
+                }
+            },
+        };
+        by_url.entry(canon.clone()).or_insert(index);
+        if let Some(key) = title_key {
+            by_title.entry(key).or_insert(index);
+        }
+        clusters[index].push((entry, canon));
+    }
+
+    let mut articles: Vec<Article> = Vec::with_capacity(clusters.len());
+    for members in clusters {
+        if members.is_empty() {
+            continue;
+        }
+        if members.len() > 1 {
+            stats.merged += 1;
+        }
+        articles.push(build_article(members, feed_urls));
+    }
+    stats.clusters = articles.len();
+
+    tracing::info!(
+        clusters = stats.clusters,
+        merged = stats.merged,
+        dropped = stats.dropped_non_article,
+        "clustered entries into articles"
+    );
+    (articles, stats)
+}
+
+/// Merge one cluster's entries into a single [`Article`], keeping the richest body.
+fn build_article(members: Vec<(Entry, String)>, feed_urls: &FeedUrls) -> Article {
+    // Richest content wins; ties break on the lowest entry id so runs are stable.
+    let best = members
+        .iter()
+        .enumerate()
+        .max_by_key(|(_, (entry, _))| (crate::extract::word_count(&entry.raw_content), -(entry.id)))
+        .map(|(i, _)| i)
+        .unwrap_or(0);
+    let (best_entry, canonical) = &members[best];
+
+    let first_seen = members
+        .iter()
+        .map(|(e, _)| e.published_at.unwrap_or(e.fetched_at))
+        .min()
+        .unwrap_or_else(Timestamp::now);
+    let published_at = members.iter().filter_map(|(e, _)| e.published_at).min();
+
+    let mut sources: Vec<SourceRef> = members
+        .iter()
+        .map(|(e, _)| source_ref_with_feeds(e, feed_urls))
+        .collect();
+    sources.sort_by_key(|s| s.entry_id);
+    sources.dedup_by_key(|s| s.entry_id);
+
+    // Prefer a comments URL that actually points at a discussion we can look up.
+    let comments_url = members
+        .iter()
+        .filter_map(|(e, _)| e.comments_url.clone())
+        .filter(|c| !c.trim().is_empty())
+        .max_by_key(|c| {
+            let lower = c.to_ascii_lowercase();
+            if lower.contains("news.ycombinator.com") {
+                2
+            } else if lower.contains("lobste.rs") {
+                1
+            } else {
+                0
+            }
+        });
+
+    let author = members
+        .iter()
+        .filter_map(|(e, _)| e.author.clone())
+        .find(|a| !a.trim().is_empty());
+
+    let word_count = crate::extract::word_count(&best_entry.raw_content);
+
+    Article {
+        id: 0,
+        canonical_url: canonical.clone(),
+        title: best_entry.title.trim().to_string(),
+        best_entry_id: best_entry.id,
+        content_html: best_entry.raw_content.clone(),
+        word_count,
+        excerpt_only: false,
+        image_count: 0,
+        sources,
+        first_seen,
+        url: best_entry.url.clone(),
+        author,
+        feed_id: best_entry.feed_id,
+        feed_title: best_entry
+            .feed_title
+            .clone()
+            .unwrap_or_else(|| format!("feed {}", best_entry.feed_id)),
+        category: best_entry.category.clone(),
+        published_at,
+        comments_url,
+        image_urls: Vec::new(),
+        social: Vec::new(),
+        extract_method: ExtractMethod::Miniflux,
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn ts(s: &str) -> Timestamp {
+        s.parse().unwrap()
+    }
+
+    fn entry(id: i64, url: &str, title: &str) -> Entry {
+        Entry {
+            id,
+            feed_id: id * 10,
+            feed_title: Some(format!("Feed {id}")),
+            category: Some("Tech".into()),
+            title: title.into(),
+            url: url.into(),
+            canonical_url: None,
+            author: None,
+            published_at: Some(ts("2026-08-15T04:00:00Z")),
+            comments_url: None,
+            raw_content: "<p>hello world</p>".into(),
+            fetched_at: ts("2026-08-15T05:30:00Z"),
+        }
+    }
+
+    #[test]
+    fn canonicalization_table() {
+        let cases: &[(&str, Option<&str>)] = &[
+            // host case + fragment
+            (
+                "https://Example.COM/Posts/One#section",
+                Some("https://example.com/Posts/One"),
+            ),
+            // trailing slash
+            ("https://example.com/a/b/", Some("https://example.com/a/b")),
+            // bare root loses its slash
+            ("https://example.com/", Some("https://example.com")),
+            ("http://example.com", Some("http://example.com")),
+            // utm_* and friends
+            (
+                "https://example.com/p?utm_source=rss&utm_medium=feed&utm_campaign=x",
+                Some("https://example.com/p"),
+            ),
+            (
+                "https://example.com/p?ref=hn&fbclid=abc&gclid=def&s=1&si=2",
+                Some("https://example.com/p"),
+            ),
+            // meaningful params survive
+            (
+                "https://example.com/p?id=7&utm_source=rss",
+                Some("https://example.com/p?id=7"),
+            ),
+            // mixed: everything at once
+            (
+                "HTTPS://WWW.Example.com/Path/?utm_source=a&page=2#frag",
+                Some("https://www.example.com/Path?page=2"),
+            ),
+            // google news redirector resolves to the target
+            (
+                "https://news.google.com/rss/articles/CBMi?oc=5&url=https%3A%2F%2Fexample.com%2Freal%2F",
+                Some("https://example.com/real"),
+            ),
+            (
+                "https://www.google.com/url?q=https://example.com/real&sa=D",
+                Some("https://example.com/real"),
+            ),
+            // non-http schemes and junk
+            ("mailto:tyler@hallada.net", None),
+            ("ftp://example.com/file", None),
+            ("not a url", None),
+            ("", None),
+            ("   ", None),
+        ];
+        for (input, expected) in cases {
+            assert_eq!(
+                canonical_url(input).as_deref(),
+                *expected,
+                "canonicalizing {input:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn canonicalization_is_idempotent() {
+        let once = canonical_url("https://Example.com/A/?utm_source=x#y").unwrap();
+        assert_eq!(canonical_url(&once).as_deref(), Some(once.as_str()));
+    }
+
+    #[test]
+    fn title_normalization() {
+        assert_eq!(
+            normalized_title("Rust 1.90: What's *New*?"),
+            "rust190whatsnew"
+        );
+        assert_eq!(
+            normalized_title("  The   Quick — Brown Fox  "),
+            "thequickbrownfox"
+        );
+        // Same story, different feed punctuation, same key.
+        assert_eq!(
+            normalized_title("Show HN: My Tiny Database"),
+            normalized_title("Show HN – My Tiny Database!")
+        );
+        assert_eq!(normalized_title("!!!"), "");
+    }
+
+    #[test]
+    fn non_articles_are_rejected() {
+        let mut youtube = entry(1, "https://www.youtube.com/watch?v=abc", "A video");
+        assert!(is_non_article(&youtube));
+        youtube.url = "https://m.youtube.com/watch?v=abc".into();
+        assert!(is_non_article(&youtube));
+
+        assert!(is_non_article(&entry(
+            2,
+            "https://open.spotify.com/episode/x",
+            "An episode"
+        )));
+        assert!(is_non_article(&entry(3, "https://example.com/p", "   ")));
+        assert!(is_non_article(&entry(4, "javascript:void(0)", "Bad url")));
+        assert!(is_non_article(&entry(
+            5,
+            "https://cdn.example.com/ep/12.mp3",
+            "Episode 12"
+        )));
+
+        let mut enclosure = entry(6, "https://example.com/pod/12", "Episode 12");
+        enclosure.raw_content = "<audio src=\"https://x/1.mp3\"></audio>".into();
+        assert!(is_non_article(&enclosure));
+
+        // An article that merely embeds a video is still an article.
+        let mut with_video = entry(7, "https://example.com/post", "A real post");
+        with_video.raw_content =
+            format!("<iframe src=\"x\"></iframe><p>{}</p>", "word ".repeat(60));
+        assert!(!is_non_article(&with_video));
+
+        assert!(!is_non_article(&entry(8, "https://example.com/p", "Fine")));
+    }
+
+    #[test]
+    fn source_kinds_come_from_feed_metadata() {
+        let mut e = entry(1, "https://example.com/p", "T");
+        e.feed_title = Some("Scour: Rust".into());
+        assert_eq!(classify_source(&e), SourceKind::Scour);
+
+        e.feed_title = Some("Hacker News: Front Page".into());
+        assert_eq!(classify_source(&e), SourceKind::HnFrontpage);
+
+        e.feed_title = Some("Some Blog".into());
+        e.comments_url = Some("https://news.ycombinator.com/item?id=1".into());
+        assert_eq!(classify_source(&e), SourceKind::HnFrontpage);
+
+        e.comments_url = Some("https://lobste.rs/s/abcdef/thing".into());
+        assert_eq!(classify_source(&e), SourceKind::Lobsters);
+
+        e.comments_url = None;
+        e.feed_title = Some("r/rust".into());
+        e.url = "https://www.reddit.com/r/rust/comments/x/y/".into();
+        assert_eq!(classify_source(&e), SourceKind::Reddit);
+
+        e.feed_title = Some("Tyler's Blog".into());
+        e.category = Some("Blogroll".into());
+        e.url = "https://hallada.net/post".into();
+        assert_eq!(classify_source(&e), SourceKind::Feed);
+
+        // The feed URL wins when the caller has it.
+        assert_eq!(
+            classify_source_with_feed(&e, Some("https://scour.ing/feed/rust")),
+            SourceKind::Scour
+        );
+    }
+
+    #[test]
+    fn clustering_merges_by_url_then_title() {
+        let long_body = format!("<p>{}</p>", "word ".repeat(400));
+
+        // Same story from three feeds: two share a URL (modulo tracking params),
+        // the third differs only in punctuation of the title.
+        let mut hn = entry(
+            1,
+            "https://blog.dev/post?utm_source=hn",
+            "A Deep Dive Into B-Trees",
+        );
+        hn.feed_title = Some("Hacker News".into());
+        hn.comments_url = Some("https://news.ycombinator.com/item?id=42".into());
+
+        let mut scour = entry(2, "https://blog.dev/post/", "A Deep Dive Into B-Trees");
+        scour.feed_title = Some("Scour: Databases".into());
+        scour.raw_content = long_body.clone();
+
+        let mut own = entry(3, "https://blog.dev/post-alt", "A Deep Dive into B-Trees!");
+        own.feed_title = Some("Blog.dev".into());
+        own.published_at = Some(ts("2026-08-15T02:00:00Z"));
+
+        let other = entry(4, "https://other.dev/x", "Something Else Entirely Here");
+
+        let (articles, stats) = cluster(vec![hn, scour, own, other]);
+        assert_eq!(stats.entries_in, 4);
+        assert_eq!(stats.clusters, 2);
+        assert_eq!(stats.merged, 1);
+        assert_eq!(stats.dropped_non_article, 0);
+
+        let merged = &articles[0];
+        assert_eq!(merged.canonical_url, "https://blog.dev/post");
+        assert_eq!(merged.sources.len(), 3);
+        // Richest content won.
+        assert_eq!(merged.best_entry_id, 2);
+        assert!(merged.word_count > 300);
+        // Union of source kinds, used as a curation signal.
+        assert!(merged.came_via(SourceKind::Scour));
+        assert!(merged.came_via(SourceKind::HnFrontpage));
+        assert!(merged.came_via(SourceKind::Feed));
+        // Earliest publication time and the HN comments link survive the merge.
+        assert_eq!(merged.first_seen, ts("2026-08-15T02:00:00Z"));
+        assert_eq!(
+            merged.comments_url.as_deref(),
+            Some("https://news.ycombinator.com/item?id=42")
+        );
+        assert_eq!(merged.id, 0);
+
+        assert_eq!(articles[1].canonical_url, "https://other.dev/x");
+        assert_eq!(articles[1].sources.len(), 1);
+    }
+
+    #[test]
+    fn clustering_drops_non_articles_and_keeps_short_titles_apart() {
+        let mut a = entry(1, "https://a.dev/1", "News");
+        a.raw_content = "<p>one</p>".into();
+        let mut b = entry(2, "https://b.dev/2", "News");
+        b.raw_content = "<p>two</p>".into();
+        let video = entry(3, "https://youtu.be/xyz", "A video");
+
+        let (articles, stats) = cluster(vec![a, b, video]);
+        assert_eq!(stats.dropped_non_article, 1);
+        // "news" is below MIN_TITLE_KEY_LEN, so the two stay separate.
+        assert_eq!(articles.len(), 2);
+        assert_eq!(stats.merged, 0);
+    }
+}
diff --git a/src/epub/build.rs b/src/epub/build.rs
new file mode 100644
index 0000000..88b5702
--- /dev/null
+++ b/src/epub/build.rs
@@ -0,0 +1,1440 @@
+//! `epub-builder` assembly and askama chapter rendering (spec §3.10).
+//!
+//! Structure: cover → From the Editor → In This Issue → sections (title page,
+//! article chapters, discussion chapters) → World Briefing → colophon.
+
+use askama::Template;
+use epub_builder::{
+    EpubBuilder, EpubContent, EpubVersion, MetadataOpfV3, ReferenceType, ZipLibrary,
+};
+use jiff::civil::Date;
+
+use crate::comments;
+use crate::types::{Edition, ImageAsset, Issue, Pick, SocialRef, Vote, WORLD_BRIEFING_SECTION};
+use crate::world;
+
+use super::EpubError;
+use super::images;
+use super::x4;
+
+/// EPUB3 `belongs-to-collection` name (§3.10).
+pub const COLLECTION_NAME: &str = "The Daily EPUB";
+/// `id` the collection refinements point at (§3.10).
+pub const COLLECTION_ID: &str = "daily-epub-collection";
+/// `dc:creator` (§3.10).
+pub const CREATOR: &str = "The Daily EPUB";
+/// `dc:language` (§3.10).
+pub const LANGUAGE: &str = "en";
+/// Characters of the hex HMAC kept in rating links (§3.9).
+pub const TOKEN_LEN: usize = crate::auth::TOKEN_LEN;
+/// Cover image path inside the EPUB.
+pub const COVER_HREF: &str = "cover.png";
+
+/// One rendered chapter ready to be added to the EPUB (§3.10).
+#[derive(Debug, Clone, PartialEq)]
+pub struct Chapter {
+    /// Stable id, e.g. `art-30011` / `disc-30011` (notes §12).
+    pub id: String,
+    /// Path inside the EPUB, e.g. `chapters/art-30011.xhtml`.
+    pub href: String,
+    pub title: String,
+    pub xhtml: String,
+    /// 1 for sections, 2 for articles/discussions — nav depth 2 (§3.10).
+    pub toc_level: u8,
+}
+
+// ---------------------------------------------------------------------------
+// Rating links (§3.9)
+// ---------------------------------------------------------------------------
+
+// One implementation, shared with the verifying side in [`crate::server`]:
+// see [`crate::auth`] for the formula and the pinned test vector (§3.9).
+pub use crate::auth::{rating_message, rating_token, rating_url};
+
+// ---------------------------------------------------------------------------
+// Templates
+// ---------------------------------------------------------------------------
+
+#[derive(Template)]
+#[template(path = "cover.svg", escape = "html")]
+struct CoverSvg {
+    width: i64,
+    height: i64,
+    margin: i64,
+    inner_width: i64,
+    inner_height: i64,
+    border: i64,
+    hairline: i64,
+    center_x: i64,
+    masthead_y: i64,
+    masthead_size: i64,
+    rule_x1: i64,
+    rule_x2: i64,
+    rule_y: i64,
+    rule2_y: i64,
+    weekday: String,
+    weekday_y: i64,
+    weekday_size: i64,
+    long_date: String,
+    date_y: i64,
+    date_size: i64,
+    issue_number: i64,
+    issue_y: i64,
+    issue_size: i64,
+    stats_line: String,
+    stats_y: i64,
+    stats_size: i64,
+    /// Empty for the standard edition — see [`cover_badge`].
+    edition_tag: String,
+    badge_x: i64,
+    badge_y: i64,
+    badge_width: i64,
+    badge_height: i64,
+    badge_radius: i64,
+    badge_text_y: i64,
+    badge_size: i64,
+    footer: String,
+    footer_y: i64,
+    footer_size: i64,
+}
+
+#[derive(Template)]
+#[template(path = "cover_page.xhtml", escape = "html")]
+struct CoverPage {
+    title: String,
+    alt: String,
+}
+
+#[derive(Template)]
+#[template(path = "front_page.xhtml", escape = "html")]
+struct FrontPage {
+    title: String,
+    display_date: String,
+    issue_number: i64,
+    stats_line: String,
+    body_html: String,
+}
+
+struct IndexEntry {
+    href: String,
+    title: String,
+    source: String,
+    reading_minutes: i64,
+    summary: String,
+}
+
+struct IndexSection {
+    name: String,
+    entries: Vec<IndexEntry>,
+}
+
+#[derive(Template)]
+#[template(path = "in_this_issue.xhtml", escape = "html")]
+struct InThisIssue {
+    title: String,
+    stats_line: String,
+    sections: Vec<IndexSection>,
+}
+
+#[derive(Template)]
+#[template(path = "section.xhtml", escape = "html")]
+struct SectionPage {
+    title: String,
+    name: String,
+    intro: Option<String>,
+}
+
+struct RatingLinks {
+    up_url: String,
+    down_url: String,
+}
+
+#[derive(Template)]
+#[template(path = "chapter.xhtml", escape = "html")]
+struct ArticleChapter {
+    title: String,
+    article_title: String,
+    byline: Option<String>,
+    meta_line: String,
+    social_line: Option<String>,
+    summary: Option<String>,
+    excerpt_only: bool,
+    body_html: String,
+    rating: Option<RatingLinks>,
+    read_online_url: String,
+    discussion_href: Option<String>,
+}
+
+#[derive(Template)]
+#[template(path = "discussion.xhtml", escape = "html")]
+struct DiscussionChapter {
+    title: String,
+    heading: String,
+    body_html: String,
+    article_href: String,
+}
+
+#[derive(Template)]
+#[template(path = "world_briefing.xhtml", escape = "html")]
+struct WorldBriefingChapter {
+    title: String,
+    display_date: String,
+    body_html: String,
+}
+
+#[derive(Template)]
+#[template(path = "colophon.xhtml", escape = "html")]
+struct ColophonChapter {
+    title: String,
+    issue_number: i64,
+    display_date: String,
+    generated_at: String,
+    model: String,
+    entries_fetched: i64,
+    feeds_seen: i64,
+    candidates: i64,
+    article_count: i64,
+    section_count: i64,
+    total_words: i64,
+    reading_line: String,
+    cost_usd: String,
+    generator_version: String,
+}
+
+// ---------------------------------------------------------------------------
+// Cover (§3.10)
+// ---------------------------------------------------------------------------
+
+/// Cover pixel size per edition: 1200×1600 standard, 480×800 X4 (§3.10).
+pub fn cover_size(edition: Edition) -> (u32, u32) {
+    match edition {
+        Edition::Standard => (1200, 1600),
+        Edition::X4 => x4::X4_SCREEN,
+    }
+}
+
+fn reading_line(minutes: i64) -> String {
+    let (h, m) = (minutes / 60, minutes % 60);
+    if h > 0 {
+        format!("~{h}h {m}m read")
+    } else {
+        format!("~{m}m read")
+    }
+}
+
+/// Split "Friday, August 15, 2026" into ("Friday", "August 15, 2026").
+fn split_display_date(display: &str) -> (String, String) {
+    match display.split_once(", ") {
+        Some((weekday, rest)) => (weekday.to_string(), rest.to_string()),
+        None => (String::new(), display.to_string()),
+    }
+}
+
+/// Reversed badge printed on the cover so the two editions are told apart at
+/// thumbnail size, where the title is unreadable (§3.10).
+///
+/// Empty for the standard edition: an unmarked cover is the default, and the
+/// presence of the slab is itself the signal.
+pub fn cover_badge(edition: Edition) -> &'static str {
+    match edition {
+        Edition::Standard => "",
+        Edition::X4 => "X4 EDITION",
+    }
+}
+
+fn cover_svg(
+    issue: &Issue,
+    edition: Edition,
+    width: u32,
+    height: u32,
+) -> Result<String, EpubError> {
+    let w = i64::from(width);
+    let h = i64::from(height);
+    let margin = w / 15;
+    let (weekday, long_date) = split_display_date(&issue.meta.display_date);
+    // A solid bar between the stats line and the footer: at 100px wide in a
+    // library grid the black slab is the only thing still legible.
+    let badge_height = h / 16;
+    let badge_width = w * 2 / 5;
+    let tpl = CoverSvg {
+        width: w,
+        height: h,
+        margin,
+        inner_width: w - 2 * margin,
+        inner_height: h - 2 * margin,
+        border: (w / 300).max(2),
+        hairline: (w / 600).max(1),
+        center_x: w / 2,
+        masthead_y: h * 30 / 100,
+        masthead_size: w / 9,
+        rule_x1: margin + w / 12,
+        rule_x2: w - margin - w / 12,
+        rule_y: h * 34 / 100,
+        rule2_y: h * 53 / 100,
+        weekday,
+        weekday_y: h * 42 / 100,
+        weekday_size: w / 28,
+        long_date,
+        date_y: h * 47 / 100,
+        date_size: w / 22,
+        issue_number: issue.meta.issue_number,
+        issue_y: h * 60 / 100,
+        issue_size: w / 18,
+        stats_line: issue.meta.stats_line(),
+        stats_y: h * 66 / 100,
+        stats_size: w / 32,
+        edition_tag: cover_badge(edition).to_string(),
+        badge_x: (w - badge_width) / 2,
+        badge_y: h * 73 / 100,
+        badge_width,
+        badge_height,
+        badge_radius: badge_height / 2,
+        badge_text_y: h * 73 / 100 + badge_height * 7 / 10,
+        badge_size: badge_height * 11 / 20,
+        footer: "Assembled overnight \u{00b7} read offline".to_string(),
+        footer_y: h - margin - h / 25,
+        footer_size: w / 40,
+    };
+    Ok(tpl.render()?)
+}
+
+/// Render the cover SVG and rasterize it with `resvg` + `tiny-skia`:
+/// 1200×1600 for `Standard`, 480×800 grayscale for `X4` (§3.10).
+pub fn render_cover(issue: &Issue, edition: Edition) -> Result<Vec<u8>, EpubError> {
+    let (width, height) = cover_size(edition);
+    let grayscale = edition == Edition::X4;
+    let svg = cover_svg(issue, edition, width, height)?;
+    match rasterize(&svg, width, height) {
+        Some(pixmap) => encode_cover(pixmap, grayscale),
+        None => {
+            tracing::warn!("no usable system fonts: falling back to a geometric cover");
+            let pixmap = draw_fallback_cover(width, height, edition)
+                .ok_or_else(|| EpubError::Build("could not allocate the cover".into()))?;
+            encode_cover(pixmap, grayscale)
+        }
+    }
+}
+
+fn rasterize(svg: &str, width: u32, height: u32) -> Option<tiny_skia::Pixmap> {
+    let mut options = resvg::usvg::Options::default();
+    options.fontdb_mut().load_system_fonts();
+    if options.fontdb.is_empty() {
+        return None;
+    }
+    let tree = resvg::usvg::Tree::from_str(svg, &options)
+        .map_err(|e| tracing::warn!("cover svg did not parse: {e}"))
+        .ok()?;
+    let mut pixmap = tiny_skia::Pixmap::new(width, height)?;
+    pixmap.fill(tiny_skia::Color::WHITE);
+    let size = tree.size();
+    let transform = tiny_skia::Transform::from_scale(
+        width as f32 / size.width(),
+        height as f32 / size.height(),
+    );
+    resvg::render(&tree, transform, &mut pixmap.as_mut());
+    Some(pixmap)
+}
+
+/// Text-free cover used when font resolution fails — the build never fails (§3.10).
+///
+/// The badge cannot carry its lettering here, but the slab itself still keeps
+/// the editions apart in a thumbnail grid.
+fn draw_fallback_cover(width: u32, height: u32, edition: Edition) -> Option<tiny_skia::Pixmap> {
+    let mut pixmap = tiny_skia::Pixmap::new(width, height)?;
+    pixmap.fill(tiny_skia::Color::WHITE);
+    let mut paint = tiny_skia::Paint::default();
+    paint.set_color(tiny_skia::Color::BLACK);
+    paint.anti_alias = true;
+
+    let w = width as f32;
+    let h = height as f32;
+    let margin = w / 15.0;
+    let rect = |x: f32, y: f32, rw: f32, rh: f32, pixmap: &mut tiny_skia::Pixmap| {
+        if let Some(r) = tiny_skia::Rect::from_xywh(x, y, rw, rh) {
+            let path = tiny_skia::PathBuilder::from_rect(r);
+            pixmap.fill_path(
+                &path,
+                &paint,
+                tiny_skia::FillRule::Winding,
+                tiny_skia::Transform::identity(),
+                None,
+            );
+        }
+    };
+    // Frame.
+    let border = (w / 300.0).max(2.0);
+    rect(margin, margin, w - 2.0 * margin, border, &mut pixmap);
+    rect(
+        margin,
+        h - margin - border,
+        w - 2.0 * margin,
+        border,
+        &mut pixmap,
+    );
+    rect(margin, margin, border, h - 2.0 * margin, &mut pixmap);
+    rect(
+        w - margin - border,
+        margin,
+        border,
+        h - 2.0 * margin,
+        &mut pixmap,
+    );
+    // Masthead slab plus body rules — a newspaper silhouette.
+    rect(
+        margin * 2.0,
+        h * 0.26,
+        w - 4.0 * margin,
+        h * 0.035,
+        &mut pixmap,
+    );
+    for i in 0..8 {
+        let y = h * 0.42 + (i as f32) * h * 0.045;
+        let inset = if i % 3 == 2 {
+            margin * 4.0
+        } else {
+            margin * 2.0
+        };
+        rect(inset, y, w - 2.0 * inset, border, &mut pixmap);
+    }
+    if !cover_badge(edition).is_empty() {
+        let badge_height = h / 16.0;
+        let badge_width = w * 2.0 / 5.0;
+        rect(
+            (w - badge_width) / 2.0,
+            h * 0.73,
+            badge_width,
+            badge_height,
+            &mut pixmap,
+        );
+    }
+    Some(pixmap)
+}
+
+fn encode_cover(pixmap: tiny_skia::Pixmap, grayscale: bool) -> Result<Vec<u8>, EpubError> {
+    let (w, h) = (pixmap.width(), pixmap.height());
+    let rgba = image::RgbaImage::from_raw(w, h, pixmap.take_demultiplied())
+        .ok_or_else(|| EpubError::Build("cover pixel buffer had the wrong size".into()))?;
+    let dynamic = image::DynamicImage::ImageRgba8(rgba);
+    let dynamic = if grayscale {
+        image::DynamicImage::ImageLuma8(dynamic.to_luma8())
+    } else {
+        image::DynamicImage::ImageRgb8(dynamic.to_rgb8())
+    };
+    let mut out = std::io::Cursor::new(Vec::new());
+    dynamic
+        .write_to(&mut out, image::ImageFormat::Png)
+        .map_err(|e| EpubError::Build(format!("cover encoding failed: {e}")))?;
+    Ok(out.into_inner())
+}
+
+// ---------------------------------------------------------------------------
+// Chapters (§3.10)
+// ---------------------------------------------------------------------------
+
+/// Prepare article markup for XHTML: rewrite images, sanitize, self-close voids.
+fn prepare_body(html: &str, images_: &[ImageAsset]) -> String {
+    // Sanitize first: image rewriting emits our own trusted markup (including the
+    // `image-placeholder` class, which ammonia would otherwise strip).
+    let cleaned = ammonia::clean(html);
+    let rewritten = images::rewrite_img_srcs(&cleaned, images_);
+    images::to_xhtml(&rewritten)
+}
+
+/// "▲ 342 on HN · 210 comments" (§3.10).
+pub fn social_line(social: &[SocialRef]) -> Option<String> {
+    let mut parts: Vec<String> = Vec::new();
+    let mut comments = 0i64;
+    for entry in social {
+        if entry.score > 0 {
+            parts.push(format!(
+                "\u{25b2} {} on {}",
+                entry.score,
+                entry.source.display_name()
+            ));
+        }
+        comments += entry.num_comments.max(0);
+    }
+    if comments > 0 {
+        let noun = if comments == 1 { "comment" } else { "comments" };
+        parts.push(format!("{comments} {noun}"));
+    }
+    if parts.is_empty() {
+        None
+    } else {
+        Some(parts.join(" \u{00b7} "))
+    }
+}
+
+fn article_href(pick: &Pick) -> String {
+    format!("{}.xhtml", pick.article.chapter_id())
+}
+
+fn discussion_href(pick: &Pick) -> String {
+    format!("disc-{}.xhtml", pick.article.best_entry_id)
+}
+
+fn section_href(name: &str) -> String {
+    let slug: String = name
+        .chars()
+        .map(|c| {
+            if c.is_ascii_alphanumeric() {
+                c.to_ascii_lowercase()
+            } else {
+                '-'
+            }
+        })
+        .collect();
+    let slug = slug
+        .split('-')
+        .filter(|s| !s.is_empty())
+        .collect::<Vec<_>>()
+        .join("-");
+    format!("sec-{slug}.xhtml")
+}
+
+fn summary_for<'a>(issue: &'a Issue, pick: &'a Pick) -> Option<&'a str> {
+    pick.summary
+        .as_deref()
+        .or_else(|| {
+            issue
+                .editorial
+                .summaries
+                .get(&pick.article.id)
+                .map(|s| s.as_str())
+        })
+        .filter(|s| !s.trim().is_empty())
+}
+
+fn published_display(pick: &Pick) -> Option<String> {
+    pick.article
+        .published_at
+        .map(|ts| ts.to_zoned(jiff::tz::TimeZone::UTC).date().to_string())
+}
+
+/// "From the Editor" front page plus the issue stats line (§3.10).
+pub fn render_front_page(issue: &Issue) -> Result<Chapter, EpubError> {
+    let body = issue.editorial.front_page_html.trim();
+    let body_html = if body.is_empty() {
+        format!(
+            "<p>{} of reading, chosen overnight.</p>",
+            images::text_escape(&issue.meta.stats_line())
+        )
+    } else {
+        images::to_xhtml(&ammonia::clean(body))
+    };
+    let tpl = FrontPage {
+        title: "From the Editor".into(),
+        display_date: issue.meta.display_date.clone(),
+        issue_number: issue.meta.issue_number,
+        stats_line: issue.meta.stats_line(),
+        body_html,
+    };
+    Ok(Chapter {
+        id: "front".into(),
+        href: "front.xhtml".into(),
+        title: "From the Editor".into(),
+        xhtml: tpl.render()?,
+        toc_level: 1,
+    })
+}
+
+/// Section names in issue order, with the reserved world section removed (§3.6).
+pub fn section_names(issue: &Issue) -> Vec<String> {
+    let mut names: Vec<String> = issue
+        .lineup
+        .section_order
+        .iter()
+        .filter(|s| s.as_str() != WORLD_BRIEFING_SECTION)
+        .cloned()
+        .collect();
+    for pick in &issue.lineup.picks {
+        if pick.section != WORLD_BRIEFING_SECTION && !names.contains(&pick.section) {
+            names.push(pick.section.clone());
+        }
+    }
+    names.retain(|n| issue.lineup.picks.iter().any(|p| &p.section == n));
+    names
+}
+
+/// "In This Issue": per section, each article's title, source, reading time and
+/// summary, linked to its chapter (§3.10).
+pub fn render_in_this_issue(issue: &Issue) -> Result<Chapter, EpubError> {
+    let mut sections = Vec::new();
+    for name in section_names(issue) {
+        let entries = issue
+            .lineup
+            .section_picks(&name)
+            .into_iter()
+            .map(|pick| IndexEntry {
+                href: article_href(pick),
+                title: pick.article.title.clone(),
+                source: pick.article.feed_title.clone(),
+                reading_minutes: pick.article.reading_minutes(),
+                summary: summary_for(issue, pick).unwrap_or_default().to_string(),
+            })
+            .collect();
+        sections.push(IndexSection { name, entries });
+    }
+    if issue.world_briefing.is_some() {
+        sections.push(IndexSection {
+            name: WORLD_BRIEFING_SECTION.to_string(),
+            entries: vec![IndexEntry {
+                href: "world.xhtml".into(),
+                title: "World Briefing".into(),
+                source: "Wikipedia Current Events".into(),
+                reading_minutes: 3,
+                summary: "The day's events, as recorded by the Current Events portal.".into(),
+            }],
+        });
+    }
+    let tpl = InThisIssue {
+        title: "In This Issue".into(),
+        stats_line: issue.meta.stats_line(),
+        sections,
+    };
+    Ok(Chapter {
+        id: "in-this-issue".into(),
+        href: "in-this-issue.xhtml".into(),
+        title: "In This Issue".into(),
+        xhtml: tpl.render()?,
+        toc_level: 1,
+    })
+}
+
+/// A section title page: name + LLM intro (§3.10).
+pub fn render_section_page(name: &str, intro: Option<&str>) -> Result<Chapter, EpubError> {
+    let tpl = SectionPage {
+        title: name.to_string(),
+        name: name.to_string(),
+        intro: intro
+            .map(|s| s.trim().to_string())
+            .filter(|s| !s.is_empty()),
+    };
+    Ok(Chapter {
+        id: format!("sec-{name}"),
+        href: section_href(name),
+        title: name.to_string(),
+        xhtml: tpl.render()?,
+        toc_level: 1,
+    })
+}
+
+/// One article chapter: header, cleaned body with embedded images, rating footer (§3.10).
+pub fn render_article(
+    issue: &Issue,
+    pick: &Pick,
+    images_: &[ImageAsset],
+    edition: Edition,
+    public_url: &str,
+    hmac_secret: Option<&str>,
+) -> Result<Chapter, EpubError> {
+    let article = &pick.article;
+    let mut meta_parts = vec![article.feed_title.clone()];
+    if let Some(date) = published_display(pick) {
+        meta_parts.push(date);
+    }
+    meta_parts.push(format!(
+        "{} min read \u{00b7} {} words",
+        article.reading_minutes(),
+        article.word_count
+    ));
+
+    // The X4 has no browser, so rating links are pointless there (§7).
+    let rating = match (hmac_secret, edition) {
+        (Some(secret), Edition::Standard) if !secret.is_empty() => Some(RatingLinks {
+            up_url: rating_url(public_url, secret, issue.meta.date, article.id, Vote::Up),
+            down_url: rating_url(public_url, secret, issue.meta.date, article.id, Vote::Down),
+        }),
+        _ => None,
+    };
+
+    let tpl = ArticleChapter {
+        title: article.title.clone(),
+        article_title: article.title.clone(),
+        byline: article.author.as_ref().map(|a| format!("By {a}")),
+        meta_line: meta_parts.join(" \u{00b7} "),
+        social_line: social_line(&article.social),
+        summary: summary_for(issue, pick).map(str::to_string),
+        excerpt_only: article.excerpt_only,
+        body_html: prepare_body(&article.content_html, images_),
+        rating,
+        read_online_url: article.url.clone(),
+        discussion_href: pick.discussion.as_ref().map(|_| discussion_href(pick)),
+    };
+    Ok(Chapter {
+        id: article.chapter_id(),
+        href: article_href(pick),
+        title: article.title.clone(),
+        xhtml: tpl.render()?,
+        toc_level: 2,
+    })
+}
+
+/// The discussion chapter that follows an article when it has comments (§3.7).
+pub fn render_discussion(pick: &Pick) -> Result<Option<Chapter>, EpubError> {
+    let Some(discussion) = &pick.discussion else {
+        return Ok(None);
+    };
+    if discussion.threads.is_empty() {
+        return Ok(None);
+    }
+    let title = comments::chapter_title(&pick.article.title, discussion);
+    let tpl = DiscussionChapter {
+        title: title.clone(),
+        heading: title.clone(),
+        body_html: comments::render_xhtml(discussion, &pick.article.title),
+        article_href: article_href(pick),
+    };
+    Ok(Some(Chapter {
+        id: format!("disc-{}", pick.article.best_entry_id),
+        href: discussion_href(pick),
+        title,
+        xhtml: tpl.render()?,
+        toc_level: 3,
+    }))
+}
+
+/// The Wikipedia Current Events section chapter (§3.8).
+pub fn render_world_briefing(issue: &Issue) -> Result<Option<Chapter>, EpubError> {
+    let Some(briefing) = &issue.world_briefing else {
+        return Ok(None);
+    };
+    // The briefing may cover an earlier day than the issue: the portal page for
+    // the issue's own date is still an empty stub at 05:30 (§3.8). Dateline the
+    // section with the day it actually reports on, not the masthead date.
+    let tpl = WorldBriefingChapter {
+        title: WORLD_BRIEFING_SECTION.to_string(),
+        display_date: crate::pipeline::display_date(briefing.date),
+        body_html: world::render_xhtml(briefing),
+    };
+    Ok(Some(Chapter {
+        id: "world".into(),
+        href: "world.xhtml".into(),
+        title: WORLD_BRIEFING_SECTION.to_string(),
+        xhtml: tpl.render()?,
+        toc_level: 1,
+    }))
+}
+
+/// Colophon: generation timestamp, models used, token cost, feed counts (§3.10).
+pub fn render_colophon(issue: &Issue) -> Result<Chapter, EpubError> {
+    let colophon = &issue.colophon;
+    let tpl = ColophonChapter {
+        title: "Colophon".into(),
+        issue_number: issue.meta.issue_number,
+        display_date: issue.meta.display_date.clone(),
+        generated_at: issue.meta.generated_at.to_string(),
+        model: if colophon.model.is_empty() {
+            "none (heuristic selection)".into()
+        } else {
+            colophon.model.clone()
+        },
+        entries_fetched: colophon.entries_fetched,
+        feeds_seen: colophon.feeds_seen,
+        candidates: colophon.candidates,
+        article_count: issue.meta.article_count,
+        section_count: issue.meta.section_count,
+        total_words: issue.meta.total_words,
+        reading_line: reading_line(issue.meta.reading_minutes),
+        cost_usd: format!("${:.4}", colophon.cost_usd),
+        generator_version: if colophon.generator_version.is_empty() {
+            format!("daily-epub {}", env!("CARGO_PKG_VERSION"))
+        } else {
+            colophon.generator_version.clone()
+        },
+    };
+    Ok(Chapter {
+        id: "colophon".into(),
+        href: "colophon.xhtml".into(),
+        title: "Colophon".into(),
+        xhtml: tpl.render()?,
+        toc_level: 1,
+    })
+}
+
+fn render_cover_page(issue: &Issue, edition: Edition) -> Result<Chapter, EpubError> {
+    let tpl = CoverPage {
+        title: issue.meta.title_for(edition),
+        alt: format!(
+            "The Daily EPUB, {} \u{2014} No. {}",
+            issue.meta.display_date, issue.meta.issue_number
+        ),
+    };
+    Ok(Chapter {
+        id: "cover".into(),
+        href: "cover.xhtml".into(),
+        title: "Cover".into(),
+        xhtml: tpl.render()?,
+        toc_level: 1,
+    })
+}
+
+/// Render every chapter for an edition, in issue order (§3.10).
+pub fn render_all(
+    issue: &Issue,
+    edition: Edition,
+    images_: &[ImageAsset],
+    public_url: &str,
+    hmac_secret: Option<&str>,
+) -> Result<Vec<Chapter>, EpubError> {
+    let mut chapters = vec![
+        render_cover_page(issue, edition)?,
+        render_front_page(issue)?,
+        render_in_this_issue(issue)?,
+    ];
+
+    for name in section_names(issue) {
+        let intro = issue
+            .editorial
+            .section_intros
+            .get(&name)
+            .map(|s| s.as_str());
+        chapters.push(render_section_page(&name, intro)?);
+        for pick in issue.lineup.section_picks(&name) {
+            chapters.push(render_article(
+                issue,
+                pick,
+                images_,
+                edition,
+                public_url,
+                hmac_secret,
+            )?);
+            if let Some(discussion) = render_discussion(pick)? {
+                chapters.push(discussion);
+            }
+        }
+    }
+
+    if let Some(world) = render_world_briefing(issue)? {
+        chapters.push(world);
+    }
+    chapters.push(render_colophon(issue)?);
+
+    if edition == Edition::X4 {
+        for chapter in &mut chapters {
+            chapter.xhtml = x4::simplify_xhtml(&chapter.xhtml);
+        }
+    }
+    tracing::debug!(count = chapters.len(), ?edition, "rendered chapters");
+    Ok(chapters)
+}
+
+// ---------------------------------------------------------------------------
+// Assembly (§3.10)
+// ---------------------------------------------------------------------------
+
+/// A `<meta property="…">…</meta>` element for `content.opf` (§3.10).
+fn opf_meta(
+    property: &str,
+    content: &str,
+    id: Option<&str>,
+    refines: Option<&str>,
+) -> MetadataOpfV3 {
+    MetadataOpfV3 {
+        property: property.to_string(),
+        content: content.to_string(),
+        dir: None,
+        id: id.map(str::to_string),
+        refines: refines.map(str::to_string),
+        scheme: None,
+        xml_lang: None,
+    }
+}
+
+/// The issue date, as `dcterms:date`, `dc:date` and `dcterms:issued` (§3.10).
+///
+/// `epub-builder` keeps `MetadataOpfV3::content` verbatim and does not export its
+/// `MetadataRenderer` trait, and `set_publication_date` wants a `chrono::DateTime`
+/// (not one of our dependencies), so the `<dc:date>` element rides along inside a
+/// trusted, fully-controlled fragment. Deliberate for v1 and listed under
+/// "known limitations" in the README; drop it if `epub-builder` ever exposes
+/// `dc:date` directly (or if `chrono` joins the dependency list).
+fn date_metadata(date: Date) -> MetadataOpfV3 {
+    opf_meta(
+        "dcterms:date",
+        &format!(
+            "{date}</meta>\n    <dc:date>{date}</dc:date>\n    \
+             <meta property=\"dcterms:issued\">{date}"
+        ),
+        None,
+        None,
+    )
+}
+
+fn epub_err(what: &str, e: impl std::fmt::Display) -> EpubError {
+    EpubError::Build(format!("{what}: {e}"))
+}
+
+/// The stylesheet for an edition (§3.10 CSS).
+pub fn stylesheet(edition: Edition) -> &'static str {
+    match edition {
+        Edition::Standard => include_str!("templates/style.css"),
+        Edition::X4 => include_str!("templates/style-x4.css"),
+    }
+}
+
+fn reference_type(chapter: &Chapter) -> Option<ReferenceType> {
+    match chapter.id.as_str() {
+        "cover" => Some(ReferenceType::Cover),
+        "front" => Some(ReferenceType::Text),
+        "in-this-issue" => Some(ReferenceType::Toc),
+        "colophon" => Some(ReferenceType::Colophon),
+        _ => None,
+    }
+}
+
+/// Zip one edition into EPUB3 bytes: metadata, cover, resources, chapters, TOC.
+pub fn assemble(
+    issue: &Issue,
+    edition: Edition,
+    chapters: &[Chapter],
+    images_: &[ImageAsset],
+    cover_png: &[u8],
+) -> Result<Vec<u8>, EpubError> {
+    let zip = ZipLibrary::new().map_err(|e| epub_err("zip library", e))?;
+    let mut builder = EpubBuilder::new(zip).map_err(|e| epub_err("epub builder", e))?;
+    builder.epub_version(EpubVersion::V30);
+    builder
+        .metadata("title", issue.meta.title_for(edition))
+        .map_err(|e| epub_err("title metadata", e))?;
+    builder
+        .metadata("author", CREATOR)
+        .map_err(|e| epub_err("author metadata", e))?;
+    builder
+        .metadata("lang", LANGUAGE)
+        .map_err(|e| epub_err("lang metadata", e))?;
+    builder
+        .metadata(
+            "generator",
+            format!("daily-epub {}", env!("CARGO_PKG_VERSION")),
+        )
+        .map_err(|e| epub_err("generator metadata", e))?;
+    builder
+        .metadata("toc_name", "Contents")
+        .map_err(|e| epub_err("toc_name metadata", e))?;
+    builder
+        .metadata(
+            "description",
+            format!(
+                "{} \u{2014} {}",
+                issue.meta.display_date,
+                issue.meta.stats_line()
+            ),
+        )
+        .map_err(|e| epub_err("description metadata", e))?;
+
+    // dc:date and the EPUB3 series metadata BookOrbit/KOReader sort on (§3.10).
+    builder.add_metadata_opf(Box::new(date_metadata(issue.meta.date)));
+    builder.add_metadata_opf(Box::new(opf_meta(
+        "belongs-to-collection",
+        COLLECTION_NAME,
+        Some(COLLECTION_ID),
+        None,
+    )));
+    builder.add_metadata_opf(Box::new(opf_meta(
+        "collection-type",
+        "series",
+        None,
+        Some(&format!("#{COLLECTION_ID}")),
+    )));
+    builder.add_metadata_opf(Box::new(opf_meta(
+        "group-position",
+        &issue.meta.issue_number.to_string(),
+        None,
+        Some(&format!("#{COLLECTION_ID}")),
+    )));
+
+    builder
+        .stylesheet(stylesheet(edition).as_bytes())
+        .map_err(|e| epub_err("stylesheet", e))?;
+    builder
+        .add_cover_image(COVER_HREF, cover_png, "image/png")
+        .map_err(|e| epub_err("cover image", e))?;
+    for asset in images_ {
+        builder
+            .add_resource(&asset.href, asset.data.as_slice(), asset.mime.clone())
+            .map_err(|e| epub_err("image resource", e))?;
+    }
+
+    for chapter in chapters {
+        let mut content = EpubContent::new(chapter.href.clone(), chapter.xhtml.as_bytes())
+            .title(chapter.title.clone())
+            .level(i32::from(chapter.toc_level));
+        if let Some(reftype) = reference_type(chapter) {
+            content = content.reftype(reftype);
+        }
+        builder
+            .add_content(content)
+            .map_err(|e| epub_err("chapter", e))?;
+    }
+
+    let mut out: Vec<u8> = Vec::new();
+    builder
+        .generate(&mut out)
+        .map_err(|e| epub_err("generate", e))?;
+    Ok(out)
+}
+
+/// A synthetic, fully offline [`Issue`] used by the unit tests here and by the
+/// integration tests in `tests/` (which can only see the public API).
+pub mod fixtures {
+    use std::collections::BTreeMap;
+
+    use jiff::Timestamp;
+
+    use crate::types::*;
+
+    pub fn timestamp() -> Timestamp {
+        "2026-08-15T05:30:00Z".parse().expect("fixed timestamp")
+    }
+
+    pub fn article(id: ArticleId, entry_id: EntryId, title: &str) -> Article {
+        Article {
+            id,
+            canonical_url: format!("https://example.com/{entry_id}"),
+            title: title.to_string(),
+            best_entry_id: entry_id,
+            content_html: format!(
+                "<p>Body of <em>{title}</em> with an image.</p><img src=\"https://img.example/{entry_id}.png\" alt=\"A chart\"><p>More words &amp; things.</p>"
+            ),
+            word_count: 1200,
+            excerpt_only: false,
+            image_count: 1,
+            sources: vec![SourceRef {
+                entry_id,
+                feed_id: 7,
+                feed_title: "Example Feed".into(),
+                category: Some("Tech".into()),
+                kind: SourceKind::Feed,
+            }],
+            first_seen: timestamp(),
+            url: format!("https://example.com/{entry_id}"),
+            author: Some("A. Writer".into()),
+            feed_id: 7,
+            feed_title: "Example Feed".into(),
+            category: Some("Tech".into()),
+            published_at: Some(timestamp()),
+            comments_url: None,
+            image_urls: vec![format!("https://img.example/{entry_id}.png")],
+            social: vec![SocialRef {
+                article_id: id,
+                source: SocialSource::Hn,
+                item_id: Some("40100000".into()),
+                score: 342,
+                num_comments: 210,
+                item_url: Some("https://news.ycombinator.com/item?id=40100000".into()),
+                fetched_at: timestamp(),
+            }],
+            extract_method: ExtractMethod::Readability,
+        }
+    }
+
+    pub fn discussion(article_id: ArticleId, entry_id: EntryId) -> Discussion {
+        Discussion {
+            article_id,
+            chapter_id: format!("disc-{entry_id}"),
+            threads: vec![CommentThread {
+                source: SocialSource::Hn,
+                item_url: "https://news.ycombinator.com/item?id=40100000".into(),
+                total_comments: 210,
+                comments: vec![Comment {
+                    author: "alice".into(),
+                    points: Some(61),
+                    text_html: "<p>The write path is the interesting part.</p>".into(),
+                    depth: 0,
+                    children: vec![Comment {
+                        author: "bob".into(),
+                        points: Some(24),
+                        text_html: "<p>Agreed.</p>".into(),
+                        depth: 1,
+                        children: vec![],
+                    }],
+                }],
+            }],
+        }
+    }
+
+    /// A synthetic two-article issue, one of them carrying a discussion.
+    pub fn issue() -> Issue {
+        let lead = Pick {
+            article: article(1, 1001, "The Lead Story"),
+            section: "Top Stories".into(),
+            position: 0,
+            is_lead: true,
+            summary: Some("What it argues, and why it is worth the time.".into()),
+            llm: None,
+            discussion: Some(discussion(1, 1001)),
+        };
+        let second = Pick {
+            article: article(2, 1002, "A Niche Delight & Other Tales"),
+            section: "Niche Corner".into(),
+            position: 0,
+            is_lead: false,
+            summary: None,
+            llm: None,
+            discussion: None,
+        };
+        let mut section_intros = BTreeMap::new();
+        section_intros.insert("Top Stories".to_string(), "The day in brief.".to_string());
+        let mut summaries = BTreeMap::new();
+        summaries.insert(2, "A short abstract for the second piece.".to_string());
+
+        Issue {
+            meta: IssueMeta {
+                date: "2026-08-15".parse().expect("fixed date"),
+                issue_number: 42,
+                generated_at: timestamp(),
+                display_date: "Friday, August 15, 2026".into(),
+                article_count: 2,
+                section_count: 2,
+                total_words: 2400,
+                reading_minutes: 11,
+            },
+            lineup: Lineup {
+                date: "2026-08-15".parse().expect("fixed date"),
+                picks: vec![lead, second],
+                section_order: vec!["Top Stories".into(), "Niche Corner".into()],
+            },
+            editorial: Editorial {
+                front_page_html: "<p>Two stories today, both worth your coffee.</p>".into(),
+                section_intros,
+                summaries,
+            },
+            world_briefing: Some(WorldBriefing {
+                date: "2026-08-15".parse().expect("fixed date"),
+                source_url: "https://en.wikipedia.org/wiki/Portal:Current_events/2026_August_15"
+                    .into(),
+                body_html: "<ul><li>Something happened somewhere.</li></ul>".into(),
+            }),
+            colophon: Colophon {
+                model: "deepseek-v4-flash".into(),
+                entries_fetched: 431,
+                feeds_seen: 92,
+                candidates: 120,
+                cost_usd: 0.0731,
+                generator_version: "daily-epub 0.1.0".into(),
+            },
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use fixtures::issue;
+    use hmac::{Hmac, KeyInit};
+    use sha2::Sha256;
+
+    #[test]
+    fn rating_token_matches_the_spec_vector() {
+        let date: Date = "2026-08-15".parse().unwrap();
+        assert_eq!(rating_message(date, 1234, Vote::Up), "2026-08-15/1234/up");
+        // hex(hmac_sha256("test-secret", "2026-08-15/1234/up"))[..16]
+        let token = rating_token("test-secret", date, 1234, Vote::Up);
+        assert_eq!(token.len(), TOKEN_LEN);
+        assert!(token.chars().all(|c| c.is_ascii_hexdigit()));
+
+        // Independently computed reference value.
+        use hmac::Mac;
+        let mut mac = Hmac::<Sha256>::new_from_slice(b"test-secret").unwrap();
+        mac.update(b"2026-08-15/1234/up");
+        let expected: String = hex::encode(mac.finalize().into_bytes())
+            .chars()
+            .take(16)
+            .collect();
+        assert_eq!(token, expected);
+
+        // Different vote, article and secret all change the token.
+        assert_ne!(token, rating_token("test-secret", date, 1234, Vote::Down));
+        assert_ne!(token, rating_token("test-secret", date, 1235, Vote::Up));
+        assert_ne!(token, rating_token("other-secret", date, 1234, Vote::Up));
+    }
+
+    /// The EPUB signs the links and `server.rs` verifies them: one formula, or no
+    /// rating ever lands. This is the vector `server::tests` pins from its side
+    /// (`VECTOR_SECRET` / `VECTOR_TOKEN_UP`) — change one, change both (§3.9).
+    #[test]
+    fn epub_and_server_share_one_token_vector() {
+        let date: Date = "2026-08-15".parse().unwrap();
+        assert_eq!(
+            rating_token("test-secret", date, 42, Vote::Up),
+            "3b314cf7e6d8f50f"
+        );
+    }
+
+    #[test]
+    fn rating_url_has_the_spec_shape() {
+        let date: Date = "2026-08-15".parse().unwrap();
+        let url = rating_url("https://daily.hallada.net/", "s3cret", date, 99, Vote::Down);
+        let token = rating_token("s3cret", date, 99, Vote::Down);
+        assert_eq!(
+            url,
+            format!("https://daily.hallada.net/r/2026-08-15/99/down?t={token}")
+        );
+    }
+
+    #[test]
+    fn social_line_matches_the_spec_example() {
+        let refs = vec![SocialRef {
+            article_id: 1,
+            source: crate::types::SocialSource::Hn,
+            item_id: None,
+            score: 342,
+            num_comments: 210,
+            item_url: None,
+            fetched_at: fixtures::timestamp(),
+        }];
+        assert_eq!(
+            social_line(&refs).as_deref(),
+            Some("\u{25b2} 342 on HN \u{00b7} 210 comments")
+        );
+        assert!(social_line(&[]).is_none());
+    }
+
+    #[test]
+    fn hrefs_are_deterministic() {
+        let issue = issue();
+        let pick = &issue.lineup.picks[0];
+        assert_eq!(article_href(pick), "art-1001.xhtml");
+        assert_eq!(discussion_href(pick), "disc-1001.xhtml");
+        assert_eq!(
+            section_href("Tech & Engineering"),
+            "sec-tech-engineering.xhtml"
+        );
+    }
+
+    fn assert_xml_ok(xhtml: &str) {
+        // A crude well-formedness check: the document parses as XML only if every
+        // tag is closed, so compare open/close counts for the elements we emit.
+        assert!(xhtml.starts_with("<?xml version=\"1.0\" encoding=\"utf-8\"?>"));
+        assert!(xhtml.contains("xmlns=\"http://www.w3.org/1999/xhtml\""));
+        assert!(xhtml.trim_end().ends_with("</html>"));
+        for tag in ["html", "head", "body", "div", "p"] {
+            let opens = xhtml.matches(&format!("<{tag}")).count();
+            let closes = xhtml.matches(&format!("</{tag}>")).count();
+            assert_eq!(opens, closes, "unbalanced <{tag}> in\n{xhtml}");
+        }
+        assert!(!xhtml.contains("&nbsp;"));
+        for void in ["<br>", "<hr>", "<img "] {
+            if void == "<img " {
+                for (i, _) in xhtml.match_indices("<img ") {
+                    let tail = &xhtml[i..];
+                    let end = tail.find('>').unwrap_or(0);
+                    assert!(tail[..end].ends_with('/'), "unclosed <img> in\n{xhtml}");
+                }
+            } else {
+                assert!(!xhtml.contains(void), "unclosed {void} in\n{xhtml}");
+            }
+        }
+    }
+
+    #[test]
+    fn front_page_renders_stats_and_editorial() {
+        let issue = issue();
+        let chapter = render_front_page(&issue).unwrap();
+        assert_eq!(chapter.href, "front.xhtml");
+        assert!(chapter.xhtml.contains("From the Editor"));
+        assert!(chapter.xhtml.contains("2 articles"));
+        assert!(chapter.xhtml.contains("both worth your coffee"));
+        assert!(chapter.xhtml.contains("No. 42"));
+        assert_xml_ok(&chapter.xhtml);
+    }
+
+    #[test]
+    fn in_this_issue_links_every_pick() {
+        let issue = issue();
+        let chapter = render_in_this_issue(&issue).unwrap();
+        assert!(chapter.xhtml.contains("href=\"art-1001.xhtml\""));
+        assert!(chapter.xhtml.contains("href=\"art-1002.xhtml\""));
+        assert!(chapter.xhtml.contains("Example Feed"));
+        assert!(chapter.xhtml.contains("6 min read"));
+        assert!(chapter.xhtml.contains("What it argues"));
+        assert!(chapter.xhtml.contains("A short abstract"));
+        // Titles are escaped (askama emits numeric references), never injected raw.
+        assert!(chapter.xhtml.contains("A Niche Delight &#38; Other Tales"));
+        assert_xml_ok(&chapter.xhtml);
+    }
+
+    #[test]
+    fn article_chapter_has_header_body_and_footer() {
+        let issue = issue();
+        let pick = &issue.lineup.picks[0];
+        let chapter = render_article(
+            &issue,
+            pick,
+            &[],
+            Edition::Standard,
+            "https://daily.hallada.net",
+            Some("s3cret"),
+        )
+        .unwrap();
+        assert_eq!(chapter.id, "art-1001");
+        assert_eq!(chapter.toc_level, 2);
+        assert!(chapter.xhtml.contains("By A. Writer"));
+        assert!(chapter.xhtml.contains("Example Feed"));
+        assert!(chapter.xhtml.contains("6 min read"));
+        assert!(chapter.xhtml.contains("\u{25b2} 342 on HN"));
+        assert!(chapter.xhtml.contains("/r/2026-08-15/1/up?t="));
+        assert!(chapter.xhtml.contains("/r/2026-08-15/1/down?t="));
+        assert!(chapter.xhtml.contains("Read online"));
+        assert!(chapter.xhtml.contains("href=\"disc-1001.xhtml\""));
+        // The un-downloaded image degrades to a placeholder.
+        assert!(chapter.xhtml.contains("[image: A chart]"));
+        assert_xml_ok(&chapter.xhtml);
+    }
+
+    #[test]
+    fn x4_articles_omit_rating_links() {
+        let issue = issue();
+        let chapter = render_article(
+            &issue,
+            &issue.lineup.picks[0],
+            &[],
+            Edition::X4,
+            "https://daily.hallada.net",
+            Some("s3cret"),
+        )
+        .unwrap();
+        assert!(!chapter.xhtml.contains("/r/2026-08-15/"));
+        assert!(chapter.xhtml.contains("Read online"));
+    }
+
+    #[test]
+    fn discussion_chapter_nests_under_its_article() {
+        let issue = issue();
+        let chapter = render_discussion(&issue.lineup.picks[0]).unwrap().unwrap();
+        assert_eq!(chapter.id, "disc-1001");
+        assert_eq!(chapter.toc_level, 3);
+        assert!(
+            chapter
+                .title
+                .starts_with("\u{1f4ac} Discussion: The Lead Story")
+        );
+        assert!(chapter.xhtml.contains("alice"));
+        assert!(chapter.xhtml.contains("blockquote class=\"comment\""));
+        assert!(chapter.xhtml.contains("href=\"art-1001.xhtml\""));
+        assert_xml_ok(&chapter.xhtml);
+        assert!(render_discussion(&issue.lineup.picks[1]).unwrap().is_none());
+    }
+
+    #[test]
+    fn world_and_colophon_chapters_render() {
+        let issue = issue();
+        let world = render_world_briefing(&issue).unwrap().unwrap();
+        assert!(world.xhtml.contains("Something happened somewhere"));
+        assert!(world.xhtml.contains("CC BY-SA"));
+        assert_xml_ok(&world.xhtml);
+
+        let colophon = render_colophon(&issue).unwrap();
+        assert!(colophon.xhtml.contains("deepseek-v4-flash"));
+        assert!(colophon.xhtml.contains("431"));
+        assert!(colophon.xhtml.contains("$0.0731"));
+        assert_xml_ok(&colophon.xhtml);
+    }
+
+    #[test]
+    fn render_all_orders_the_issue() {
+        let issue = issue();
+        let chapters = render_all(&issue, Edition::Standard, &[], "https://x.test", None).unwrap();
+        let ids: Vec<&str> = chapters.iter().map(|c| c.id.as_str()).collect();
+        assert_eq!(
+            ids,
+            vec![
+                "cover",
+                "front",
+                "in-this-issue",
+                "sec-Top Stories",
+                "art-1001",
+                "disc-1001",
+                "sec-Niche Corner",
+                "art-1002",
+                "world",
+                "colophon",
+            ]
+        );
+        let levels: Vec<u8> = chapters.iter().map(|c| c.toc_level).collect();
+        assert_eq!(levels, vec![1, 1, 1, 1, 2, 3, 1, 2, 1, 1]);
+        for chapter in &chapters {
+            assert_xml_ok(&chapter.xhtml);
+        }
+    }
+
+    #[test]
+    fn covers_rasterize_for_both_editions() {
+        let issue = issue();
+        for edition in [Edition::Standard, Edition::X4] {
+            let png = render_cover(&issue, edition).expect("cover");
+            let decoded = image::load_from_memory(&png).expect("cover is a valid png");
+            assert_eq!(
+                (decoded.width(), decoded.height()),
+                cover_size(edition),
+                "cover size for {edition:?}"
+            );
+            if edition == Edition::X4 {
+                assert_eq!(decoded.color(), image::ColorType::L8);
+            }
+        }
+    }
+
+    #[test]
+    fn fallback_cover_is_drawn_without_fonts() {
+        let png = encode_cover(draw_fallback_cover(480, 800, Edition::X4).unwrap(), true).unwrap();
+        let decoded = image::load_from_memory(&png).unwrap();
+        assert_eq!((decoded.width(), decoded.height()), (480, 800));
+        // Some ink actually landed on the page.
+        let gray = decoded.to_luma8();
+        assert!(gray.pixels().any(|p| p[0] < 32));
+        assert!(gray.pixels().any(|p| p[0] > 224));
+
+        // The badge slab is the only per-edition mark the text-free fallback can
+        // draw, so the two editions still differ without any fonts installed.
+        let standard = draw_fallback_cover(480, 800, Edition::Standard).unwrap();
+        let x4 = draw_fallback_cover(480, 800, Edition::X4).unwrap();
+        assert_ne!(standard.data(), x4.data());
+        assert!(badge_ink(&x4) > badge_ink(&standard));
+    }
+
+    /// Dark pixels inside the badge rectangle.
+    fn badge_ink(pixmap: &tiny_skia::Pixmap) -> usize {
+        let (w, h) = (pixmap.width() as usize, pixmap.height() as usize);
+        let (x0, x1) = (w * 3 / 10, w * 7 / 10);
+        let (y0, y1) = (h * 74 / 100, h * 78 / 100);
+        let mut dark = 0;
+        for y in y0..y1 {
+            for x in x0..x1 {
+                if pixmap.data()[(y * w + x) * 4] < 32 {
+                    dark += 1;
+                }
+            }
+        }
+        dark
+    }
+
+    /// At thumbnail size the title is unreadable, so the cover itself has to
+    /// say which edition it is (§3.10).
+    #[test]
+    fn only_the_x4_cover_carries_the_edition_badge() {
+        let issue = fixtures::issue();
+        let x4 = cover_svg(&issue, Edition::X4, 480, 800).unwrap();
+        assert!(x4.contains(">X4 EDITION<"), "{x4}");
+        // White appears twice: the page ground, and the badge text reversed out
+        // of the slab.
+        assert_eq!(x4.matches("fill=\"#ffffff\"").count(), 2, "{x4}");
+
+        let standard = cover_svg(&issue, Edition::Standard, 1200, 1600).unwrap();
+        assert!(!standard.contains("X4"));
+        assert_eq!(standard.matches("fill=\"#ffffff\"").count(), 1);
+
+        // The badge sits between the stats line and the footer, inside the frame.
+        let png = render_cover(&issue, Edition::X4).unwrap();
+        let gray = image::load_from_memory(&png).unwrap().to_luma8();
+        let dark_in_badge = (584..634)
+            .flat_map(|y| (144..336).map(move |x| (x, y)))
+            .filter(|&(x, y)| gray.get_pixel(x, y)[0] < 32)
+            .count();
+        assert!(
+            dark_in_badge > 4000,
+            "badge slab is missing: {dark_in_badge}"
+        );
+    }
+}
diff --git a/src/epub/images.rs b/src/epub/images.rs
new file mode 100644
index 0000000..a002155
--- /dev/null
+++ b/src/epub/images.rs
@@ -0,0 +1,715 @@
+//! Image download and re-encoding (spec §3.10 "Images").
+//!
+//! Failed downloads degrade to a `[image: alt text]` placeholder paragraph — the
+//! run never fails because of an image (notes §3).
+
+use std::collections::HashMap;
+use std::io::Cursor;
+use std::time::Duration;
+
+use futures::StreamExt;
+use image::{DynamicImage, GenericImageView, ImageFormat};
+
+use crate::types::{Edition, ImageAsset, Pick};
+
+/// Per-image download timeout (§3.10).
+pub const DOWNLOAD_TIMEOUT_SECS: u64 = 10;
+/// Per-image size cap (§3.10).
+pub const MAX_IMAGE_BYTES: usize = 5 * 1024 * 1024;
+/// Concurrent downloads (§3.10).
+pub const CONCURRENCY: usize = 8;
+/// Whole-issue asset budget (§3.10).
+pub const ISSUE_ASSET_BUDGET_BYTES: usize = 25 * 1024 * 1024;
+/// Images smaller than this in either dimension are decorative — skipped (§3.10).
+pub const MIN_DIMENSION_PX: u32 = 24;
+/// Images referenced per article are already capped at 12 by extraction (§3.3).
+pub const MAX_IMAGES_PER_ARTICLE: usize = 12;
+
+/// HTML void elements: XHTML requires them self-closed (§3.10 "valid XHTML").
+pub const VOID_ELEMENTS: &[&str] = &[
+    "area", "base", "br", "col", "embed", "hr", "img", "input", "link", "meta", "param", "source",
+    "track", "wbr",
+];
+
+/// Per-edition re-encoding parameters (§3.10).
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub struct ImageProfile {
+    pub max_width: u32,
+    pub max_height: u32,
+    pub jpeg_quality: u8,
+    pub grayscale: bool,
+}
+
+impl ImageProfile {
+    /// Standard edition: max width 1200px, JPEG q80, color (§3.10).
+    pub const STANDARD: ImageProfile = ImageProfile {
+        max_width: 1200,
+        max_height: 4000,
+        jpeg_quality: 80,
+        grayscale: false,
+    };
+
+    /// X4 edition: grayscale Luma8, fit within 480×800, JPEG q70 (§3.10).
+    pub const X4: ImageProfile = ImageProfile {
+        max_width: 480,
+        max_height: 800,
+        jpeg_quality: 70,
+        grayscale: true,
+    };
+
+    pub fn for_edition(edition: Edition) -> Self {
+        match edition {
+            Edition::Standard => Self::STANDARD,
+            Edition::X4 => Self::X4,
+        }
+    }
+}
+
+/// One `<img>` found in article markup, with the caption of its `<figure>` if any.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct ImgRef {
+    pub src: String,
+    pub alt: String,
+    pub caption: Option<String>,
+}
+
+/// Collect `<img>` references (src, alt, enclosing figcaption) from article markup.
+pub fn extract_img_refs(html: &str) -> Vec<ImgRef> {
+    let doc = scraper::Html::parse_fragment(html);
+    let Ok(img_sel) = scraper::Selector::parse("img") else {
+        return Vec::new();
+    };
+    let cap_sel = scraper::Selector::parse("figcaption").ok();
+
+    let mut out = Vec::new();
+    let mut seen: Vec<String> = Vec::new();
+    for el in doc.select(&img_sel) {
+        let Some(src) = el.value().attr("src") else {
+            continue;
+        };
+        let src = src.trim();
+        if src.is_empty() || src.starts_with("data:") {
+            continue;
+        }
+        if seen.iter().any(|s| s == src) {
+            continue;
+        }
+        seen.push(src.to_string());
+        let alt = el
+            .value()
+            .attr("alt")
+            .unwrap_or_default()
+            .trim()
+            .to_string();
+        // Walk up to an enclosing <figure> and take its caption, if any.
+        let mut caption = None;
+        if let Some(cap_sel) = &cap_sel {
+            let mut cursor = el.parent();
+            while let Some(node) = cursor {
+                if let Some(elem) = scraper::ElementRef::wrap(node) {
+                    if elem.value().name() == "figure" {
+                        caption = elem.select(cap_sel).next().map(|c| {
+                            c.text()
+                                .collect::<String>()
+                                .split_whitespace()
+                                .collect::<Vec<_>>()
+                                .join(" ")
+                        });
+                        break;
+                    }
+                    cursor = elem.parent();
+                } else {
+                    break;
+                }
+            }
+        }
+        out.push(ImgRef {
+            src: src.to_string(),
+            alt,
+            caption: caption.filter(|c| !c.is_empty()),
+        });
+    }
+    out
+}
+
+/// Download one image, honoring the timeout and size cap (§3.10).
+pub async fn download(http: &reqwest::Client, url: &str) -> Option<Vec<u8>> {
+    let resp = http
+        .get(url)
+        .timeout(Duration::from_secs(DOWNLOAD_TIMEOUT_SECS))
+        .send()
+        .await
+        .map_err(|e| tracing::debug!(url, "image download failed: {e}"))
+        .ok()?;
+    if !resp.status().is_success() {
+        tracing::debug!(url, status = %resp.status(), "image download rejected");
+        return None;
+    }
+    if let Some(len) = resp.content_length()
+        && len as usize > MAX_IMAGE_BYTES
+    {
+        tracing::debug!(url, len, "image exceeds the size cap");
+        return None;
+    }
+    let mut resp = resp;
+    let mut buf: Vec<u8> = Vec::new();
+    loop {
+        match resp.chunk().await {
+            Ok(Some(chunk)) => {
+                if buf.len() + chunk.len() > MAX_IMAGE_BYTES {
+                    tracing::debug!(url, "image exceeds the size cap mid-stream");
+                    return None;
+                }
+                buf.extend_from_slice(&chunk);
+            }
+            Ok(None) => break,
+            Err(e) => {
+                tracing::debug!(url, "image download interrupted: {e}");
+                return None;
+            }
+        }
+    }
+    if buf.is_empty() { None } else { Some(buf) }
+}
+
+/// Decode, resize/grayscale, flatten transparency to white and re-encode (§3.10).
+///
+/// Line art with transparency is kept as PNG after flattening; everything else
+/// becomes JPEG. Returns `None` for undecodable sources (SVG/WebP without support).
+pub fn reencode(bytes: &[u8], profile: ImageProfile) -> Option<(Vec<u8>, &'static str)> {
+    let format = image::guess_format(bytes).ok();
+    let decoded = image::load_from_memory(bytes)
+        .map_err(|e| tracing::debug!("undecodable image: {e}"))
+        .ok()?;
+
+    let (w, h) = decoded.dimensions();
+    if w < MIN_DIMENSION_PX || h < MIN_DIMENSION_PX {
+        tracing::debug!(w, h, "skipping decorative image");
+        return None;
+    }
+
+    let has_alpha = decoded.color().has_alpha();
+    let flattened = if has_alpha {
+        flatten_to_white(&decoded)
+    } else {
+        decoded
+    };
+
+    let resized = if w > profile.max_width || h > profile.max_height {
+        flattened.resize(
+            profile.max_width,
+            profile.max_height,
+            image::imageops::FilterType::Lanczos3,
+        )
+    } else {
+        flattened
+    };
+
+    // Keep line art (PNG source, few distinct tones) lossless; everything else
+    // becomes JPEG, which is far smaller for photographs (§3.10).
+    let keep_png = format == Some(ImageFormat::Png) && is_line_art(&resized);
+
+    let mut out = Cursor::new(Vec::new());
+    // NB: encode the concrete buffer, not the `DynamicImage` — the latter always
+    // reports RGBA pixels, which would silently re-colorize a grayscale image.
+    if profile.grayscale {
+        let gray = resized.to_luma8();
+        if keep_png {
+            DynamicImage::ImageLuma8(gray)
+                .write_to(&mut out, ImageFormat::Png)
+                .ok()?;
+            return Some((out.into_inner(), "image/png"));
+        }
+        let mut enc =
+            image::codecs::jpeg::JpegEncoder::new_with_quality(&mut out, profile.jpeg_quality);
+        enc.encode_image(&gray).ok()?;
+        return Some((out.into_inner(), "image/jpeg"));
+    }
+
+    let rgb = resized.to_rgb8();
+    if keep_png {
+        DynamicImage::ImageRgb8(rgb)
+            .write_to(&mut out, ImageFormat::Png)
+            .ok()?;
+        return Some((out.into_inner(), "image/png"));
+    }
+    let mut enc =
+        image::codecs::jpeg::JpegEncoder::new_with_quality(&mut out, profile.jpeg_quality);
+    enc.encode_image(&rgb).ok()?;
+    Some((out.into_inner(), "image/jpeg"))
+}
+
+/// Composite over an opaque white page — e-ink has no transparency (§3.10).
+fn flatten_to_white(img: &DynamicImage) -> DynamicImage {
+    let rgba = img.to_rgba8();
+    let mut rgb = image::RgbImage::new(rgba.width(), rgba.height());
+    for (x, y, px) in rgba.enumerate_pixels() {
+        let a = f32::from(px[3]) / 255.0;
+        let blend = |c: u8| {
+            ((f32::from(c) * a) + 255.0 * (1.0 - a))
+                .round()
+                .clamp(0.0, 255.0) as u8
+        };
+        rgb.put_pixel(x, y, image::Rgb([blend(px[0]), blend(px[1]), blend(px[2])]));
+    }
+    DynamicImage::ImageRgb8(rgb)
+}
+
+/// Cheap line-art test: few distinct colors (diagrams, logos, screenshots of text).
+fn is_line_art(img: &DynamicImage) -> bool {
+    const SAMPLE_LIMIT: usize = 20_000;
+    const DISTINCT_LIMIT: usize = 64;
+    let rgb = img.to_rgb8();
+    let mut distinct: Vec<[u8; 3]> = Vec::with_capacity(DISTINCT_LIMIT + 1);
+    for (i, px) in rgb.pixels().enumerate() {
+        if i >= SAMPLE_LIMIT {
+            break;
+        }
+        let c = [px[0], px[1], px[2]];
+        if !distinct.contains(&c) {
+            distinct.push(c);
+            if distinct.len() > DISTINCT_LIMIT {
+                return false;
+            }
+        }
+    }
+    true
+}
+
+/// Everything needed to fetch one image, in deterministic issue order.
+#[derive(Debug, Clone)]
+struct PendingImage {
+    id: String,
+    url: String,
+    alt: String,
+    caption: Option<String>,
+}
+
+fn pending_for_pick(pick: &Pick) -> Vec<PendingImage> {
+    let entry_id = pick.article.best_entry_id;
+    let mut refs = extract_img_refs(&pick.article.content_html);
+    if refs.is_empty() {
+        refs = pick
+            .article
+            .image_urls
+            .iter()
+            .map(|u| ImgRef {
+                src: u.clone(),
+                alt: String::new(),
+                caption: None,
+            })
+            .collect();
+    }
+    refs.into_iter()
+        .filter(|r| r.src.starts_with("http://") || r.src.starts_with("https://"))
+        .take(MAX_IMAGES_PER_ARTICLE)
+        .enumerate()
+        .map(|(i, r)| PendingImage {
+            id: format!("img-{entry_id}-{i}"),
+            url: r.src,
+            alt: r.alt,
+            caption: r.caption,
+        })
+        .collect()
+}
+
+/// Download and re-encode every image referenced by the lineup for one edition,
+/// respecting [`ISSUE_ASSET_BUDGET_BYTES`] (§3.10).
+pub async fn collect_for_issue(
+    http: &reqwest::Client,
+    picks: &[Pick],
+    edition: Edition,
+) -> Vec<ImageAsset> {
+    let profile = ImageProfile::for_edition(edition);
+    let pending: Vec<PendingImage> = picks.iter().flat_map(pending_for_pick).collect();
+    if pending.is_empty() {
+        return Vec::new();
+    }
+    tracing::info!(count = pending.len(), ?edition, "downloading issue images");
+
+    let results: Vec<Option<(PendingImage, Vec<u8>, &'static str)>> =
+        futures::stream::iter(pending.into_iter().map(|p| {
+            let http = http.clone();
+            async move {
+                let raw = download(&http, &p.url).await?;
+                let (bytes, mime) = tokio::task::spawn_blocking(move || reencode(&raw, profile))
+                    .await
+                    .ok()
+                    .flatten()?;
+                Some((p, bytes, mime))
+            }
+        }))
+        .buffered(CONCURRENCY)
+        .collect()
+        .await;
+
+    let mut assets = Vec::new();
+    let mut budget_used = 0usize;
+    let mut skipped = 0usize;
+    for result in results.into_iter().flatten() {
+        let (pending, bytes, mime) = result;
+        if budget_used + bytes.len() > ISSUE_ASSET_BUDGET_BYTES {
+            skipped += 1;
+            continue;
+        }
+        budget_used += bytes.len();
+        let ext = if mime == "image/png" { "png" } else { "jpg" };
+        assets.push(ImageAsset {
+            href: format!("images/{}.{ext}", pending.id),
+            id: pending.id,
+            mime: mime.to_string(),
+            data: bytes,
+            alt: pending.alt,
+            caption: pending.caption,
+            source_url: pending.url,
+        });
+    }
+    if skipped > 0 {
+        tracing::warn!(skipped, budget_used, "issue image budget exhausted");
+    }
+    tracing::info!(
+        embedded = assets.len(),
+        bytes = budget_used,
+        "issue images ready"
+    );
+    assets
+}
+
+// ---------------------------------------------------------------------------
+// Markup rewriting
+// ---------------------------------------------------------------------------
+
+/// End index (exclusive) of the tag starting at `start` (`html[start] == '<'`),
+/// respecting quoted attribute values and comments.
+pub(crate) fn tag_end(html: &str, start: usize) -> Option<usize> {
+    let rest = &html[start..];
+    if rest.starts_with("<!--") {
+        return rest.find("-->").map(|i| start + i + 3);
+    }
+    let mut quote: Option<char> = None;
+    for (i, c) in rest.char_indices().skip(1) {
+        match (quote, c) {
+            (Some(q), c) if c == q => quote = None,
+            (Some(_), _) => {}
+            (None, '"') | (None, '\'') => quote = Some(c),
+            (None, '>') => return Some(start + i + c.len_utf8()),
+            (None, _) => {}
+        }
+    }
+    None
+}
+
+/// Lowercased element name of a tag body such as `img src="…"`.
+pub(crate) fn tag_name(inner: &str) -> String {
+    inner
+        .trim_start_matches('/')
+        .split(|c: char| c.is_whitespace() || c == '/' || c == '>')
+        .next()
+        .unwrap_or("")
+        .to_ascii_lowercase()
+}
+
+/// Parse `name="value"` pairs out of a tag body.
+fn parse_attrs(inner: &str) -> Vec<(String, String)> {
+    let mut attrs = Vec::new();
+    let bytes: Vec<char> = inner.chars().collect();
+    let mut i = 0;
+    // Skip the element name.
+    while i < bytes.len() && !bytes[i].is_whitespace() {
+        i += 1;
+    }
+    while i < bytes.len() {
+        while i < bytes.len() && (bytes[i].is_whitespace() || bytes[i] == '/') {
+            i += 1;
+        }
+        let name_start = i;
+        while i < bytes.len() && !bytes[i].is_whitespace() && bytes[i] != '=' && bytes[i] != '/' {
+            i += 1;
+        }
+        if i == name_start {
+            break;
+        }
+        let name: String = bytes[name_start..i]
+            .iter()
+            .collect::<String>()
+            .to_ascii_lowercase();
+        while i < bytes.len() && bytes[i].is_whitespace() {
+            i += 1;
+        }
+        let mut value = String::new();
+        if i < bytes.len() && bytes[i] == '=' {
+            i += 1;
+            while i < bytes.len() && bytes[i].is_whitespace() {
+                i += 1;
+            }
+            if i < bytes.len() && (bytes[i] == '"' || bytes[i] == '\'') {
+                let quote = bytes[i];
+                i += 1;
+                while i < bytes.len() && bytes[i] != quote {
+                    value.push(bytes[i]);
+                    i += 1;
+                }
+                i += 1;
+            } else {
+                while i < bytes.len() && !bytes[i].is_whitespace() && bytes[i] != '>' {
+                    value.push(bytes[i]);
+                    i += 1;
+                }
+            }
+        }
+        attrs.push((name, value));
+    }
+    attrs
+}
+
+/// Escape a string for use inside a double-quoted XML attribute.
+fn attr_escape(s: &str) -> String {
+    let mut out = String::with_capacity(s.len());
+    for c in s.chars() {
+        match c {
+            '&' => out.push_str("&amp;"),
+            '<' => out.push_str("&lt;"),
+            '>' => out.push_str("&gt;"),
+            '"' => out.push_str("&quot;"),
+            _ => out.push(c),
+        }
+    }
+    out
+}
+
+/// Escape a string for XML text content.
+pub fn text_escape(s: &str) -> String {
+    let mut out = String::with_capacity(s.len());
+    for c in s.chars() {
+        match c {
+            '&' => out.push_str("&amp;"),
+            '<' => out.push_str("&lt;"),
+            '>' => out.push_str("&gt;"),
+            _ => out.push(c),
+        }
+    }
+    out
+}
+
+/// Rewrite `<img src>` to the embedded hrefs, replacing misses with the
+/// `[image: alt]` placeholder paragraph (§3.10).
+pub fn rewrite_img_srcs(html: &str, assets: &[ImageAsset]) -> String {
+    let by_url: HashMap<&str, &ImageAsset> =
+        assets.iter().map(|a| (a.source_url.as_str(), a)).collect();
+    let mut out = String::with_capacity(html.len());
+    let mut cursor = 0usize;
+    while let Some(rel) = html[cursor..].find('<') {
+        let start = cursor + rel;
+        out.push_str(&html[cursor..start]);
+        let Some(end) = tag_end(html, start) else {
+            out.push_str(&html[start..]);
+            return out;
+        };
+        let raw = &html[start..end];
+        let inner = raw
+            .trim_start_matches('<')
+            .trim_end_matches('>')
+            .trim_end_matches('/');
+        if tag_name(inner) == "img" {
+            let attrs = parse_attrs(inner);
+            let src = attrs
+                .iter()
+                .find(|(k, _)| k == "src")
+                .map(|(_, v)| v.trim().to_string())
+                .unwrap_or_default();
+            let alt = attrs
+                .iter()
+                .find(|(k, _)| k == "alt")
+                .map(|(_, v)| v.trim().to_string())
+                .unwrap_or_default();
+            match by_url.get(src.as_str()) {
+                Some(asset) => {
+                    let alt = if alt.is_empty() { &asset.alt } else { &alt };
+                    out.push_str(&format!(
+                        "<img src=\"{}\" alt=\"{}\"/>",
+                        attr_escape(&asset.href),
+                        attr_escape(alt)
+                    ));
+                }
+                None => {
+                    let label = if alt.is_empty() {
+                        "image unavailable"
+                    } else {
+                        &alt
+                    };
+                    out.push_str(&format!(
+                        "<p class=\"image-placeholder\">[image: {}]</p>",
+                        text_escape(label)
+                    ));
+                }
+            }
+        } else {
+            out.push_str(raw);
+        }
+        cursor = end;
+    }
+    out.push_str(&html[cursor..]);
+    out
+}
+
+/// Self-close HTML void elements and normalize `&nbsp;` so the markup parses as
+/// XML — EPUB3 content documents are XHTML (§3.10).
+pub fn to_xhtml(html: &str) -> String {
+    let mut out = String::with_capacity(html.len());
+    let mut cursor = 0usize;
+    while let Some(rel) = html[cursor..].find('<') {
+        let start = cursor + rel;
+        out.push_str(&html[cursor..start]);
+        let Some(end) = tag_end(html, start) else {
+            out.push_str(&html[start..]);
+            cursor = html.len();
+            break;
+        };
+        let raw = &html[start..end];
+        let inner = raw.trim_start_matches('<').trim_end_matches('>');
+        let name = tag_name(inner);
+        if VOID_ELEMENTS.contains(&name.as_str()) && !inner.trim_end().ends_with('/') {
+            out.push('<');
+            out.push_str(inner.trim_end());
+            out.push_str("/>");
+        } else {
+            out.push_str(raw);
+        }
+        cursor = end;
+    }
+    out.push_str(&html[cursor..]);
+    // html5ever (via ammonia) emits `&nbsp;`, which is undefined in XML.
+    out.replace("&nbsp;", "&#160;")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn asset(url: &str, href: &str) -> ImageAsset {
+        ImageAsset {
+            id: "img-1-0".into(),
+            href: href.into(),
+            mime: "image/jpeg".into(),
+            data: vec![1, 2, 3],
+            alt: "fallback alt".into(),
+            caption: None,
+            source_url: url.into(),
+        }
+    }
+
+    #[test]
+    fn extracts_img_refs_with_captions() {
+        let html = r#"<p>hi</p>
+            <figure><img src="https://e.g/a.png" alt="A diagram"/>
+            <figcaption>Figure 1:  the thing</figcaption></figure>
+            <img src="https://e.g/b.jpg"/>
+            <img src="data:image/png;base64,zz"/>
+            <img src="https://e.g/a.png" alt="dupe"/>"#;
+        let refs = extract_img_refs(html);
+        assert_eq!(refs.len(), 2);
+        assert_eq!(refs[0].src, "https://e.g/a.png");
+        assert_eq!(refs[0].alt, "A diagram");
+        assert_eq!(refs[0].caption.as_deref(), Some("Figure 1: the thing"));
+        assert_eq!(refs[1].src, "https://e.g/b.jpg");
+        assert!(refs[1].caption.is_none());
+    }
+
+    #[test]
+    fn rewrites_hits_and_placeholders_misses() {
+        let assets = vec![asset("https://e.g/a.png", "images/img-1-0.jpg")];
+        let html = r#"<p>x</p><img src="https://e.g/a.png" alt="Alt &amp; more"><img src="https://e.g/gone.png" alt="Missing">"#;
+        let out = rewrite_img_srcs(html, &assets);
+        assert!(out.contains(r#"<img src="images/img-1-0.jpg" alt="Alt &amp;amp; more"/>"#));
+        assert!(out.contains(r#"<p class="image-placeholder">[image: Missing]</p>"#));
+        assert!(!out.contains("gone.png"));
+    }
+
+    #[test]
+    fn placeholder_falls_back_when_alt_is_missing() {
+        let out = rewrite_img_srcs(r#"<img src="https://e.g/x.png">"#, &[]);
+        assert_eq!(
+            out,
+            r#"<p class="image-placeholder">[image: image unavailable]</p>"#
+        );
+    }
+
+    #[test]
+    fn to_xhtml_self_closes_voids_and_entities() {
+        let html = "<p>a<br>b<hr>c&nbsp;d<img src=\"x.png\" alt=\"y\"></p><p>e<br/></p>";
+        let out = to_xhtml(html);
+        assert!(out.contains("<br/>"));
+        assert!(out.contains("<hr/>"));
+        assert!(out.contains("<img src=\"x.png\" alt=\"y\"/>"));
+        assert!(out.contains("&#160;"));
+        assert!(!out.contains("&nbsp;"));
+        assert!(!out.contains("<br/ >"));
+        // Already-closed voids are left alone (no double slash).
+        assert_eq!(out.matches("<br/>").count(), 2);
+    }
+
+    #[test]
+    fn tag_scanner_ignores_angle_brackets_in_attributes() {
+        let html = r#"<a title="a > b">x</a>"#;
+        assert_eq!(to_xhtml(html), html);
+    }
+
+    #[test]
+    fn reencode_resizes_grayscales_and_encodes() {
+        let mut img = image::RgbaImage::new(200, 100);
+        for (x, y, px) in img.enumerate_pixels_mut() {
+            *px = image::Rgba([(x % 256) as u8, (y % 256) as u8, 128, 255]);
+        }
+        let mut png = Cursor::new(Vec::new());
+        DynamicImage::ImageRgba8(img)
+            .write_to(&mut png, ImageFormat::Png)
+            .unwrap();
+        let raw = png.into_inner();
+
+        let (std_bytes, std_mime) = reencode(&raw, ImageProfile::STANDARD).unwrap();
+        assert_eq!(std_mime, "image/jpeg");
+        let decoded = image::load_from_memory(&std_bytes).unwrap();
+        assert_eq!(decoded.dimensions(), (200, 100), "no upscaling");
+
+        let (x4_bytes, _) = reencode(&raw, ImageProfile::X4).unwrap();
+        let x4 = image::load_from_memory(&x4_bytes).unwrap();
+        assert!(x4.width() <= 480 && x4.height() <= 800);
+        assert_eq!(x4.color(), image::ColorType::L8, "X4 is grayscale Luma8");
+    }
+
+    #[test]
+    fn reencode_skips_decorative_images_and_junk() {
+        let tiny = image::RgbaImage::new(8, 8);
+        let mut png = Cursor::new(Vec::new());
+        DynamicImage::ImageRgba8(tiny)
+            .write_to(&mut png, ImageFormat::Png)
+            .unwrap();
+        assert!(reencode(&png.into_inner(), ImageProfile::STANDARD).is_none());
+        assert!(reencode(b"<svg>not an image</svg>", ImageProfile::STANDARD).is_none());
+    }
+
+    #[test]
+    fn line_art_png_stays_png_and_is_flattened() {
+        let mut img = image::RgbaImage::new(120, 60);
+        for (x, _y, px) in img.enumerate_pixels_mut() {
+            *px = if x % 12 == 0 {
+                image::Rgba([0, 0, 0, 255])
+            } else {
+                image::Rgba([255, 255, 255, 0])
+            };
+        }
+        let mut png = Cursor::new(Vec::new());
+        DynamicImage::ImageRgba8(img)
+            .write_to(&mut png, ImageFormat::Png)
+            .unwrap();
+        let (bytes, mime) = reencode(&png.into_inner(), ImageProfile::STANDARD).unwrap();
+        assert_eq!(mime, "image/png");
+        let decoded = image::load_from_memory(&bytes).unwrap();
+        assert!(!decoded.color().has_alpha(), "transparency is flattened");
+        // Transparent pixels became white.
+        assert_eq!(
+            decoded.to_rgb8().get_pixel(1, 1),
+            &image::Rgb([255, 255, 255])
+        );
+    }
+}
diff --git a/src/epub/mod.rs b/src/epub/mod.rs
new file mode 100644
index 0000000..75fa8e4
--- /dev/null
+++ b/src/epub/mod.rs
@@ -0,0 +1,208 @@
+//! EPUB assembly (spec §3.10).
+//!
+//! Two editions per issue: `Standard` and `X4`. Both are fully offline (every
+//! asset embedded), EPUB3 with a nav TOC + NCX fallback, chapter ids
+//! `art-{entry_id}` so rating links stay stable across regenerations.
+
+pub mod build;
+pub mod images;
+pub mod x4;
+
+use std::path::{Path, PathBuf};
+
+use crate::config::Config;
+use crate::types::{Artifact, Edition, ImageAsset, Issue};
+
+/// Chapter order inside an issue (§3.10).
+pub const CHAPTER_ORDER: &[&str] = &[
+    "cover",
+    "from-the-editor",
+    "in-this-issue",
+    "sections",
+    "world-briefing",
+    "colophon",
+];
+
+#[derive(Debug, thiserror::Error)]
+pub enum EpubError {
+    #[error("epub build failed: {0}")]
+    Build(String),
+    #[error("template rendering failed: {0}")]
+    Template(#[from] askama::Error),
+    #[error("io error writing {path}: {source}")]
+    Io {
+        path: PathBuf,
+        #[source]
+        source: std::io::Error,
+    },
+}
+
+/// Output filename: `The Daily EPUB - 2026-08-15.epub` / `… (X4).epub` (§3.11).
+pub fn output_filename(issue: &Issue, edition: Edition) -> String {
+    format!(
+        "The Daily EPUB - {}{}.epub",
+        issue.meta.date,
+        edition.file_suffix()
+    )
+}
+
+/// Build one edition into `out_dir`, returning the written artifact (§3.10).
+///
+/// Downloads and re-encodes the issue's images first; everything else is offline.
+pub async fn build_edition(
+    issue: &Issue,
+    edition: Edition,
+    cfg: &Config,
+    out_dir: &Path,
+) -> Result<Artifact, EpubError> {
+    let http = crate::http::build_client(crate::http::DEFAULT_TIMEOUT)
+        .map_err(|e| EpubError::Build(format!("http client: {e}")))?;
+    let assets = images::collect_for_issue(&http, &issue.lineup.picks, edition).await;
+    build_edition_with_images(issue, edition, cfg, out_dir, &assets)
+}
+
+/// The offline half of [`build_edition`]: render, zip and write (§3.10).
+pub fn build_edition_with_images(
+    issue: &Issue,
+    edition: Edition,
+    cfg: &Config,
+    out_dir: &Path,
+    assets: &[ImageAsset],
+) -> Result<Artifact, EpubError> {
+    let span = tracing::info_span!("epub", %issue.meta.date, ?edition);
+    let _guard = span.enter();
+
+    let chapters = build::render_all(
+        issue,
+        edition,
+        assets,
+        &cfg.server.public_url,
+        cfg.server.hmac_secret.as_deref(),
+    )?;
+    let cover = build::render_cover(issue, edition)?;
+    let bytes = build::assemble(issue, edition, &chapters, assets, &cover)?;
+
+    std::fs::create_dir_all(out_dir).map_err(|source| EpubError::Io {
+        path: out_dir.to_path_buf(),
+        source,
+    })?;
+    let path = out_dir.join(output_filename(issue, edition));
+    // Write + rename so a reader (or BookOrbit's watcher) never sees a partial file.
+    let tmp = path.with_extension("epub.part");
+    std::fs::write(&tmp, &bytes).map_err(|source| EpubError::Io {
+        path: tmp.clone(),
+        source,
+    })?;
+    std::fs::rename(&tmp, &path).map_err(|source| EpubError::Io {
+        path: path.clone(),
+        source,
+    })?;
+
+    tracing::info!(
+        path = %path.display(),
+        bytes = bytes.len(),
+        chapters = chapters.len(),
+        images = assets.len(),
+        "wrote edition"
+    );
+    Ok(Artifact {
+        edition,
+        path,
+        bytes: bytes.len() as u64,
+    })
+}
+
+/// Build both editions, returning the artifacts and how many images were
+/// embedded across them (the run report records the count, §3.10, §3.13).
+pub async fn build_all(
+    issue: &Issue,
+    cfg: &Config,
+    out_dir: &Path,
+) -> Result<(Vec<Artifact>, usize), EpubError> {
+    let http = crate::http::build_client(crate::http::DEFAULT_TIMEOUT)
+        .map_err(|e| EpubError::Build(format!("http client: {e}")))?;
+    let mut artifacts = Vec::with_capacity(2);
+    let mut embedded = 0;
+    for edition in [Edition::Standard, Edition::X4] {
+        // Downloaded per edition: the two editions need different resolutions
+        // and colour profiles (§3.10 images).
+        let assets = images::collect_for_issue(&http, &issue.lineup.picks, edition).await;
+        embedded += assets.len();
+        artifacts.push(build_edition_with_images(
+            issue, edition, cfg, out_dir, &assets,
+        )?);
+    }
+    Ok((artifacts, embedded))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::epub::build::fixtures;
+
+    /// Local file headers store entry names verbatim, so a byte search over the
+    /// archive is enough to assert its contents without a zip reader.
+    fn contains_entry(zip: &[u8], name: &str) -> bool {
+        zip.windows(name.len()).any(|w| w == name.as_bytes())
+    }
+
+    #[test]
+    fn output_filenames_follow_the_spec() {
+        let issue = fixtures::issue();
+        assert_eq!(
+            output_filename(&issue, Edition::Standard),
+            "The Daily EPUB - 2026-08-15.epub"
+        );
+        assert_eq!(
+            output_filename(&issue, Edition::X4),
+            "The Daily EPUB - 2026-08-15 (X4).epub"
+        );
+    }
+
+    #[test]
+    fn builds_a_complete_epub_for_both_editions() {
+        let issue = fixtures::issue();
+        let cfg = Config::default();
+        let dir = tempfile::tempdir().expect("tempdir");
+
+        for edition in [Edition::Standard, Edition::X4] {
+            let artifact =
+                build_edition_with_images(&issue, edition, &cfg, dir.path(), &[]).expect("build");
+            assert_eq!(artifact.edition, edition);
+            assert!(artifact.path.exists());
+            assert!(artifact.bytes > 1000);
+
+            let zip = std::fs::read(&artifact.path).expect("read epub");
+            assert_eq!(&zip[0..4], b"PK\x03\x04", "is a zip");
+            assert_eq!(&zip[30..38], b"mimetype", "mimetype is the first entry");
+            assert_eq!(&zip[38..58], b"application/epub+zip");
+            for entry in [
+                "META-INF/container.xml",
+                "OEBPS/content.opf",
+                "OEBPS/toc.ncx",
+                "OEBPS/nav.xhtml",
+                "OEBPS/stylesheet.css",
+                "OEBPS/cover.png",
+                "OEBPS/cover.xhtml",
+                "OEBPS/front.xhtml",
+                "OEBPS/in-this-issue.xhtml",
+                "OEBPS/art-1001.xhtml",
+                "OEBPS/disc-1001.xhtml",
+                "OEBPS/art-1002.xhtml",
+                "OEBPS/world.xhtml",
+                "OEBPS/colophon.xhtml",
+            ] {
+                assert!(
+                    contains_entry(&zip, entry),
+                    "missing {entry} in {edition:?}"
+                );
+            }
+            // No leftover temp file.
+            assert!(
+                !dir.path()
+                    .join("The Daily EPUB - 2026-08-15.epub.part")
+                    .exists()
+            );
+        }
+    }
+}
diff --git a/src/epub/templates/README.md b/src/epub/templates/README.md
new file mode 100644
index 0000000..fd806b7
--- /dev/null
+++ b/src/epub/templates/README.md
@@ -0,0 +1,32 @@
+# EPUB templates
+
+Askama templates and stylesheets for the two editions (spec §3.10, implementation
+notes §11). `src/epub/build.rs` owns the structs they bind to; `askama.toml` at
+the crate root points askama here (`dirs = ["src/epub/templates"]`).
+
+| File | Template struct | Purpose |
+|---|---|---|
+| `base.xhtml` | — | Shared XHTML skeleton (`{% block body_class %}`, `{% block content %}`) |
+| `cover_page.xhtml` | `CoverPage` | Page that displays the rasterized cover image |
+| `front_page.xhtml` | `FrontPage` | "From the Editor" + issue stats line |
+| `in_this_issue.xhtml` | `InThisIssue` | Introduction chapter: per-section linked index |
+| `section.xhtml` | `SectionPage` | Section title page + LLM intro |
+| `chapter.xhtml` | `ArticleChapter` | Article: header, body, rating/read-online footer |
+| `discussion.xhtml` | `DiscussionChapter` | Comment chapter (§3.7); body from `comments::render_xhtml` |
+| `world_briefing.xhtml` | `WorldBriefingChapter` | Wikipedia Current Events (§3.8), body from `world::render_xhtml` |
+| `colophon.xhtml` | `ColophonChapter` | Back matter: models, cost, counts |
+| `cover.svg` | `CoverSvg` | Typographic cover, rasterized with resvg + tiny-skia |
+| `style.css` | — | Standard-edition stylesheet, embedded as `stylesheet.css` |
+| `style-x4.css` | — | X4 stylesheet: no floats/flex/grid, no fonts, hyphenation on |
+
+Conventions:
+
+- Every content template `{% extends "base.xhtml" %}` and provides `title`.
+- Templates declare `escape = "html"` — `.xhtml`/`.svg` are not in askama's
+  default escaper extension list. Escaping emits numeric character references
+  (`&#38;`), which are valid XML; only pre-sanitized markup uses `|safe`.
+- Markup that reaches `|safe` has gone through `ammonia` **and**
+  `epub::images::to_xhtml` (void elements self-closed, `&nbsp;` → `&#160;`) so
+  the output parses as XML, as EPUB3 content documents must.
+- Entities other than the five XML built-ins are written as numeric references
+  in the templates themselves (`&#183;`, `&#128077;`, …).
diff --git a/src/epub/templates/base.xhtml b/src/epub/templates/base.xhtml
new file mode 100644
index 0000000..95b7c09
--- /dev/null
+++ b/src/epub/templates/base.xhtml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+  <head>
+    <meta charset="utf-8"/>
+    <title>{{ title }}</title>
+    <link rel="stylesheet" type="text/css" href="stylesheet.css"/>
+  </head>
+  <body>
+    <div class="chapter {% block body_class %}text{% endblock %}">
+{% block content %}{% endblock %}
+    </div>
+  </body>
+</html>
diff --git a/src/epub/templates/chapter.xhtml b/src/epub/templates/chapter.xhtml
new file mode 100644
index 0000000..18d4b04
--- /dev/null
+++ b/src/epub/templates/chapter.xhtml
@@ -0,0 +1,34 @@
+{% extends "base.xhtml" %}
+{% block body_class %}article{% endblock %}
+{% block content %}
+      <div class="article-header">
+        <h1 class="article-title">{{ article_title }}</h1>
+{% if let Some(line) = byline %}
+        <p class="byline">{{ line }}</p>
+{% endif %}
+        <p class="meta">{{ meta_line }}</p>
+{% if let Some(line) = social_line %}
+        <p class="social">{{ line }}</p>
+{% endif %}
+{% if let Some(text) = summary %}
+        <p class="summary">{{ text }}</p>
+{% endif %}
+{% if excerpt_only %}
+        <p class="notice">(excerpt only &#8212; read online)</p>
+{% endif %}
+      </div>
+      <hr class="rule"/>
+      <div class="article-body">
+{{ body_html|safe }}
+      </div>
+      <hr class="rule"/>
+      <div class="article-footer">
+{% if let Some(links) = rating %}
+        <p class="rating">Was this a good pick? <a href="{{ links.up_url }}">[ &#128077; Yes ]</a> &#183; <a href="{{ links.down_url }}">[ &#128078; No ]</a></p>
+{% endif %}
+        <p class="read-online"><a href="{{ read_online_url }}">Read online &#8599;</a></p>
+{% if let Some(href) = discussion_href %}
+        <p class="see-discussion"><a href="{{ href }}">&#128172; Read the discussion</a></p>
+{% endif %}
+      </div>
+{% endblock %}
diff --git a/src/epub/templates/colophon.xhtml b/src/epub/templates/colophon.xhtml
new file mode 100644
index 0000000..a8a488c
--- /dev/null
+++ b/src/epub/templates/colophon.xhtml
@@ -0,0 +1,25 @@
+{% extends "base.xhtml" %}
+{% block body_class %}colophon{% endblock %}
+{% block content %}
+      <h1>Colophon</h1>
+      <p>
+        <em>The Daily EPUB</em> is assembled every morning from a personal Miniflux
+        feed reader: entries are deduplicated, read in full, weighed against social
+        proof, then scored, sectioned and introduced by a language model.
+      </p>
+      <dl class="colophon-facts">
+        <dt class="fact-key">Issue</dt><dd class="fact-value">No. {{ issue_number }} &#183; {{ display_date }}</dd>
+        <dt class="fact-key">Generated</dt><dd class="fact-value">{{ generated_at }}</dd>
+        <dt class="fact-key">Curation model</dt><dd class="fact-value">{{ model }}</dd>
+        <dt class="fact-key">Entries considered</dt><dd class="fact-value">{{ entries_fetched }} from {{ feeds_seen }} feeds</dd>
+        <dt class="fact-key">Candidates scored</dt><dd class="fact-value">{{ candidates }}</dd>
+        <dt class="fact-key">Articles selected</dt><dd class="fact-value">{{ article_count }} across {{ section_count }} sections</dd>
+        <dt class="fact-key">Words</dt><dd class="fact-value">{{ total_words }} &#183; {{ reading_line }}</dd>
+        <dt class="fact-key">Token cost</dt><dd class="fact-value">{{ cost_usd }}</dd>
+        <dt class="fact-key">Generator</dt><dd class="fact-value">{{ generator_version }}</dd>
+      </dl>
+      <p class="attribution">
+        Article text belongs to its authors and publications; excerpts and links are
+        provided for personal reading. Comment excerpts belong to their posters.
+      </p>
+{% endblock %}
diff --git a/src/epub/templates/cover.svg b/src/epub/templates/cover.svg
new file mode 100644
index 0000000..1589027
--- /dev/null
+++ b/src/epub/templates/cover.svg
@@ -0,0 +1,25 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="{{ width }}" height="{{ height }}" viewBox="0 0 {{ width }} {{ height }}">
+  <rect x="0" y="0" width="{{ width }}" height="{{ height }}" fill="#ffffff"/>
+  <rect x="{{ margin }}" y="{{ margin }}" width="{{ inner_width }}" height="{{ inner_height }}"
+        fill="none" stroke="#111111" stroke-width="{{ border }}"/>
+  <text x="{{ center_x }}" y="{{ masthead_y }}" text-anchor="middle" fill="#111111"
+        font-family="Georgia, 'Times New Roman', Times, serif" font-size="{{ masthead_size }}">The Daily EPUB</text>
+  <line x1="{{ rule_x1 }}" y1="{{ rule_y }}" x2="{{ rule_x2 }}" y2="{{ rule_y }}" stroke="#111111" stroke-width="{{ border }}"/>
+  <text x="{{ center_x }}" y="{{ weekday_y }}" text-anchor="middle" fill="#111111"
+        font-family="Georgia, 'Times New Roman', Times, serif" font-size="{{ weekday_size }}">{{ weekday }}</text>
+  <text x="{{ center_x }}" y="{{ date_y }}" text-anchor="middle" fill="#111111"
+        font-family="Georgia, 'Times New Roman', Times, serif" font-size="{{ date_size }}">{{ long_date }}</text>
+  <line x1="{{ rule_x1 }}" y1="{{ rule2_y }}" x2="{{ rule_x2 }}" y2="{{ rule2_y }}" stroke="#111111" stroke-width="{{ hairline }}"/>
+  <text x="{{ center_x }}" y="{{ issue_y }}" text-anchor="middle" fill="#111111"
+        font-family="Georgia, 'Times New Roman', Times, serif" font-size="{{ issue_size }}">No. {{ issue_number }}</text>
+  <text x="{{ center_x }}" y="{{ stats_y }}" text-anchor="middle" fill="#111111"
+        font-family="Georgia, 'Times New Roman', Times, serif" font-size="{{ stats_size }}">{{ stats_line }}</text>
+{% if !edition_tag.is_empty() %}
+  <rect x="{{ badge_x }}" y="{{ badge_y }}" width="{{ badge_width }}" height="{{ badge_height }}"
+        rx="{{ badge_radius }}" fill="#111111"/>
+  <text x="{{ center_x }}" y="{{ badge_text_y }}" text-anchor="middle" fill="#ffffff"
+        font-family="Georgia, 'Times New Roman', Times, serif" font-size="{{ badge_size }}">{{ edition_tag }}</text>
+{% endif %}
+  <text x="{{ center_x }}" y="{{ footer_y }}" text-anchor="middle" fill="#111111"
+        font-family="Georgia, 'Times New Roman', Times, serif" font-size="{{ footer_size }}">{{ footer }}</text>
+</svg>
diff --git a/src/epub/templates/cover_page.xhtml b/src/epub/templates/cover_page.xhtml
new file mode 100644
index 0000000..8489323
--- /dev/null
+++ b/src/epub/templates/cover_page.xhtml
@@ -0,0 +1,5 @@
+{% extends "base.xhtml" %}
+{% block body_class %}cover-page{% endblock %}
+{% block content %}
+      <div class="cover-image"><img src="cover.png" alt="{{ alt }}"/></div>
+{% endblock %}
diff --git a/src/epub/templates/discussion.xhtml b/src/epub/templates/discussion.xhtml
new file mode 100644
index 0000000..0af5bd6
--- /dev/null
+++ b/src/epub/templates/discussion.xhtml
@@ -0,0 +1,8 @@
+{% extends "base.xhtml" %}
+{% block body_class %}discussion{% endblock %}
+{% block content %}
+      <h1 class="discussion-title">{{ heading }}</h1>
+      <p class="discussion-note">Selected threads, truncated for reading on e-ink.</p>
+{{ body_html|safe }}
+      <p class="back-link"><a href="{{ article_href }}">&#8617; Back to the article</a></p>
+{% endblock %}
diff --git a/src/epub/templates/front_page.xhtml b/src/epub/templates/front_page.xhtml
new file mode 100644
index 0000000..a6f2e8a
--- /dev/null
+++ b/src/epub/templates/front_page.xhtml
@@ -0,0 +1,12 @@
+{% extends "base.xhtml" %}
+{% block body_class %}front-page{% endblock %}
+{% block content %}
+      <h1 class="masthead">The Daily EPUB</h1>
+      <p class="dateline">{{ display_date }} &#183; No. {{ issue_number }}</p>
+      <hr class="rule"/>
+      <h2 class="kicker">From the Editor</h2>
+      <div class="editorial">
+{{ body_html|safe }}
+      </div>
+      <p class="stats">{{ stats_line }}</p>
+{% endblock %}
diff --git a/src/epub/templates/in_this_issue.xhtml b/src/epub/templates/in_this_issue.xhtml
new file mode 100644
index 0000000..c2f15bc
--- /dev/null
+++ b/src/epub/templates/in_this_issue.xhtml
@@ -0,0 +1,20 @@
+{% extends "base.xhtml" %}
+{% block body_class %}in-this-issue{% endblock %}
+{% block content %}
+      <h1>In This Issue</h1>
+      <p class="stats">{{ stats_line }}</p>
+{% for section in sections %}
+      <h2 class="index-section">{{ section.name }}</h2>
+      <ul class="index-list">
+{% for entry in section.entries %}
+        <li class="index-entry">
+          <p class="index-title"><a href="{{ entry.href }}">{{ entry.title }}</a></p>
+          <p class="index-meta">{{ entry.source }} &#183; {{ entry.reading_minutes }} min read</p>
+{% if !entry.summary.is_empty() %}
+          <p class="index-summary">{{ entry.summary }}</p>
+{% endif %}
+        </li>
+{% endfor %}
+      </ul>
+{% endfor %}
+{% endblock %}
diff --git a/src/epub/templates/section.xhtml b/src/epub/templates/section.xhtml
new file mode 100644
index 0000000..3f424de
--- /dev/null
+++ b/src/epub/templates/section.xhtml
@@ -0,0 +1,9 @@
+{% extends "base.xhtml" %}
+{% block body_class %}section-page{% endblock %}
+{% block content %}
+      <h1 class="section-title">{{ name }}</h1>
+      <hr class="rule"/>
+{% if let Some(text) = intro %}
+      <p class="section-intro">{{ text }}</p>
+{% endif %}
+{% endblock %}
diff --git a/src/epub/templates/style-x4.css b/src/epub/templates/style-x4.css
new file mode 100644
index 0000000..38b7556
--- /dev/null
+++ b/src/epub/templates/style-x4.css
@@ -0,0 +1,188 @@
+/* Xteink X4 stylesheet (spec §3.10 "X4 edition").
+   No floats, no flex, no grid, no embedded fonts, larger base font,
+   generous line-height, hyphenation on. 480x800, 2-bit grayscale.
+
+   Selectors are `tag`, `.class` and `tag.class` only — the X4 firmware's CSS
+   engine does not support descendant combinators, so a rule like
+   `.comment-body p` is silently dropped on the device. Where a tag rule needs
+   an exception, the `tag.class` override follows it immediately so the result
+   is right whether the engine resolves by specificity or by source order. */
+
+@page {
+  margin: 0.4em;
+}
+
+body {
+  font-family: serif;
+  font-size: 1.2em;
+  line-height: 1.7;
+  margin: 0 0.5em;
+  text-align: left;
+  hyphens: auto;
+  -webkit-hyphens: auto;
+  adobe-hyphenate: auto;
+  word-wrap: break-word;
+}
+
+.chapter {
+  page-break-before: always;
+  break-before: page;
+}
+
+h1, h2, h3, h4 {
+  font-weight: bold;
+  line-height: 1.3;
+  page-break-after: avoid;
+  break-after: avoid;
+  margin: 0.6em 0 0.35em 0;
+  hyphens: none;
+  -webkit-hyphens: none;
+}
+
+h1 { font-size: 1.35em; }
+h2 { font-size: 1.15em; }
+h3, h4 { font-size: 1em; }
+
+p {
+  margin: 0 0 0.6em 0;
+}
+
+a {
+  color: #000000;
+  text-decoration: underline;
+}
+
+hr.rule {
+  border: 0;
+  border-top: 1px solid #000000;
+  margin: 0.7em 0;
+  height: 0;
+}
+
+img {
+  max-width: 100%;
+  height: auto;
+}
+
+.cover-page {
+  text-align: center;
+  margin: 0;
+}
+
+.masthead {
+  font-size: 1.6em;
+  text-align: center;
+}
+
+.dateline,
+.stats,
+.meta,
+.social,
+.index-meta,
+.discussion-note,
+.attribution,
+.comment-meta {
+  font-size: 0.85em;
+}
+
+.dateline,
+.stats {
+  text-align: center;
+}
+
+.section-page {
+  text-align: center;
+}
+
+.section-title {
+  font-size: 1.5em;
+  margin-top: 1.5em;
+}
+
+.section-intro,
+.summary,
+.byline {
+  font-style: italic;
+}
+
+ul, ol {
+  margin: 0 0 0.5em 1em;
+  padding: 0;
+}
+
+ul.index-list {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+}
+
+.index-entry {
+  margin: 0 0 0.8em 0;
+}
+
+.index-title,
+.index-meta,
+.index-summary {
+  margin: 0;
+}
+
+figure {
+  margin: 0.6em 0;
+  text-align: center;
+}
+
+figcaption,
+.image-caption,
+.image-placeholder {
+  font-size: 0.85em;
+  font-style: italic;
+  text-align: center;
+}
+
+pre, code {
+  font-family: monospace;
+  font-size: 0.85em;
+  white-space: pre-wrap;
+  word-wrap: break-word;
+  hyphens: none;
+  -webkit-hyphens: none;
+}
+
+table {
+  border-collapse: collapse;
+  font-size: 0.85em;
+}
+
+td, th {
+  border: 1px solid #666666;
+  padding: 0.15em 0.3em;
+}
+
+blockquote {
+  margin: 0.5em 0 0.5em 0.3em;
+  padding-left: 0.5em;
+  border-left: 2px solid #666666;
+}
+
+blockquote.comment {
+  margin: 0.4em 0;
+  padding-left: 0.5em;
+  border-left: 2px solid #666666;
+}
+
+blockquote.reply {
+  border-left: 1px solid #999999;
+}
+
+p.comment-line {
+  margin: 0 0 0.35em 0;
+}
+
+dt.fact-key {
+  font-weight: bold;
+  margin-top: 0.35em;
+}
+
+dd.fact-value {
+  margin: 0 0 0 0.8em;
+}
diff --git a/src/epub/templates/style.css b/src/epub/templates/style.css
new file mode 100644
index 0000000..48b0a95
--- /dev/null
+++ b/src/epub/templates/style.css
@@ -0,0 +1,290 @@
+/* Standard-edition stylesheet (spec §3.10 "CSS").
+   Serif body, grayscale only, page-break-before on chapters,
+   blockquote-indent comment styling. Tuned for e-ink readers. */
+
+@page {
+  margin: 1em;
+}
+
+body {
+  font-family: Georgia, "Times New Roman", Times, serif;
+  font-size: 1em;
+  line-height: 1.5;
+  margin: 0 1em;
+  text-align: left;
+  widows: 2;
+  orphans: 2;
+}
+
+.chapter {
+  page-break-before: always;
+  break-before: page;
+}
+
+h1, h2, h3, h4 {
+  font-weight: normal;
+  line-height: 1.25;
+  page-break-after: avoid;
+  break-after: avoid;
+  margin: 0.8em 0 0.4em 0;
+}
+
+h1 { font-size: 1.5em; }
+h2 { font-size: 1.25em; }
+h3 { font-size: 1.1em; }
+h4 { font-size: 1em; font-style: italic; }
+
+p {
+  margin: 0 0 0.7em 0;
+}
+
+a {
+  color: #000000;
+  text-decoration: underline;
+}
+
+hr.rule {
+  border: 0;
+  border-top: 1px solid #000000;
+  margin: 0.9em 0;
+  height: 0;
+}
+
+/* --- cover ------------------------------------------------------------- */
+
+.cover-page {
+  text-align: center;
+  margin: 0;
+  padding: 0;
+}
+
+.cover-image img {
+  max-width: 100%;
+  max-height: 100%;
+}
+
+/* --- front page -------------------------------------------------------- */
+
+.masthead {
+  font-size: 2.1em;
+  text-align: center;
+  letter-spacing: 0.02em;
+  margin-bottom: 0.1em;
+}
+
+.dateline {
+  text-align: center;
+  font-size: 0.9em;
+  font-variant: small-caps;
+  margin-bottom: 0.6em;
+}
+
+.kicker {
+  font-variant: small-caps;
+  text-align: center;
+}
+
+.stats {
+  font-size: 0.85em;
+  font-style: italic;
+  text-align: center;
+  margin-top: 1em;
+}
+
+/* --- in this issue ----------------------------------------------------- */
+
+.index-list {
+  list-style: none;
+  margin: 0;
+  padding: 0;
+}
+
+.index-entry {
+  margin: 0 0 0.9em 0;
+  page-break-inside: avoid;
+  break-inside: avoid;
+}
+
+.index-title {
+  margin: 0;
+  font-size: 1.05em;
+}
+
+.index-meta {
+  margin: 0;
+  font-size: 0.8em;
+  font-variant: small-caps;
+}
+
+.index-summary {
+  margin: 0.2em 0 0 0;
+  font-size: 0.9em;
+}
+
+/* --- sections and articles --------------------------------------------- */
+
+.section-page {
+  text-align: center;
+}
+
+.section-title {
+  font-size: 2em;
+  font-variant: small-caps;
+  margin-top: 2.5em;
+}
+
+.section-intro {
+  font-style: italic;
+  margin: 0 1.5em;
+}
+
+.article-title {
+  font-size: 1.6em;
+  margin-bottom: 0.2em;
+}
+
+.byline {
+  margin: 0;
+  font-style: italic;
+}
+
+.meta, .social {
+  margin: 0;
+  font-size: 0.8em;
+  font-variant: small-caps;
+}
+
+.summary {
+  margin: 0.5em 0 0 0;
+  font-style: italic;
+}
+
+.notice {
+  font-size: 0.85em;
+  font-style: italic;
+}
+
+.article-body img {
+  max-width: 100%;
+  height: auto;
+}
+
+.article-body figure {
+  margin: 0.8em 0;
+  text-align: center;
+  page-break-inside: avoid;
+  break-inside: avoid;
+}
+
+.article-body figcaption,
+.image-caption {
+  font-size: 0.8em;
+  font-style: italic;
+  text-align: center;
+}
+
+.image-placeholder {
+  font-size: 0.85em;
+  font-style: italic;
+  color: #444444;
+}
+
+.article-body blockquote {
+  margin: 0.6em 0 0.6em 1em;
+  padding-left: 0.6em;
+  border-left: 2px solid #999999;
+  font-style: italic;
+}
+
+.article-body pre,
+.article-body code {
+  font-family: "DejaVu Sans Mono", "Courier New", monospace;
+  font-size: 0.85em;
+}
+
+.article-body pre {
+  white-space: pre-wrap;
+  word-wrap: break-word;
+  border-left: 2px solid #cccccc;
+  padding-left: 0.5em;
+}
+
+.article-body table {
+  border-collapse: collapse;
+  font-size: 0.85em;
+}
+
+.article-body td,
+.article-body th {
+  border: 1px solid #999999;
+  padding: 0.2em 0.4em;
+}
+
+.article-footer {
+  font-size: 0.9em;
+}
+
+.rating a {
+  text-decoration: none;
+}
+
+/* --- discussion chapters (§3.7) ---------------------------------------- */
+
+.discussion-note {
+  font-size: 0.8em;
+  font-style: italic;
+}
+
+.discussion-source {
+  font-variant: small-caps;
+  font-size: 1.1em;
+  margin-top: 1em;
+}
+
+blockquote.comment {
+  border-left: 2px solid #888888;
+  margin: 0.5em 0 0.5em 0;
+  padding-left: 0.7em;
+  page-break-inside: avoid;
+  break-inside: avoid;
+}
+
+blockquote.comment blockquote.comment {
+  border-left: 1px solid #aaaaaa;
+  margin-left: 0.2em;
+}
+
+.comment-meta {
+  font-size: 0.78em;
+  font-variant: small-caps;
+  margin: 0 0 0.15em 0;
+}
+
+.comment-body p {
+  margin: 0 0 0.4em 0;
+}
+
+/* --- world briefing and colophon --------------------------------------- */
+
+.world-body ul {
+  margin: 0 0 0.6em 1.1em;
+  padding: 0;
+}
+
+.world-body li {
+  margin-bottom: 0.25em;
+}
+
+.attribution {
+  font-size: 0.8em;
+  font-style: italic;
+}
+
+.colophon-facts dt {
+  font-variant: small-caps;
+  margin-top: 0.4em;
+}
+
+.colophon-facts dd {
+  margin: 0 0 0 1em;
+}
diff --git a/src/epub/templates/world_briefing.xhtml b/src/epub/templates/world_briefing.xhtml
new file mode 100644
index 0000000..3620e87
--- /dev/null
+++ b/src/epub/templates/world_briefing.xhtml
@@ -0,0 +1,10 @@
+{% extends "base.xhtml" %}
+{% block body_class %}world-briefing{% endblock %}
+{% block content %}
+      <h1>World Briefing</h1>
+      <p class="dateline">{{ display_date }}</p>
+      <hr class="rule"/>
+      <div class="world-body">
+{{ body_html|safe }}
+      </div>
+{% endblock %}
diff --git a/src/epub/x4.rs b/src/epub/x4.rs
new file mode 100644
index 0000000..390e4f7
--- /dev/null
+++ b/src/epub/x4.rs
@@ -0,0 +1,644 @@
+//! Xteink X4 edition transforms and the XTC converter invocation
+//! (spec §3.10 X4 edition, §3.11).
+//!
+//! The converter has no global npm bin: it is run as
+//! `node <repo>/cli/index.js convert <in.epub> -o <out.xtch> -f xtch [-c settings.json]`
+//! (implementation notes, verified facts). A missing or failing converter is
+//! non-fatal — XTC is a bonus artifact.
+
+use std::path::{Path, PathBuf};
+
+use crate::config::XtcConfig;
+
+use super::images::tag_end;
+
+/// Native X4 screen size, used for the cover and image fitting (§3.10).
+pub const X4_SCREEN: (u32, u32) = (480, 800);
+
+/// Attributes that let a document lay itself out — dropped for the X4 (§3.10).
+pub const DROPPED_ATTRIBUTES: &[&str] = &[
+    "style", "align", "width", "height", "srcset", "sizes", "loading", "hspace", "vspace", "border",
+];
+
+/// Longest unbroken run of non-whitespace the X4 firmware will lay out; past
+/// this it stops wrapping and the line runs off the 480px screen (§3.10).
+///
+/// Real text never gets near 200 characters — this is for minified source in a
+/// code block and for bare URLs pasted into comment threads.
+pub const MAX_WORD_CHARS: usize = 200;
+
+/// U+00AD, invisible unless the renderer actually needs to break there.
+const SOFT_HYPHEN: char = '\u{00ad}';
+
+/// Elements whose content is code, not prose, and must be copied through
+/// untouched — a soft hyphen inside a stylesheet would corrupt it.
+const RAW_TEXT_ELEMENTS: &[&str] = &["script", "style"];
+
+/// Declarations the X4 renderer cannot honor (§3.10).
+const DROPPED_PROPERTIES: &[&str] = &[
+    "float",
+    "clear",
+    "position",
+    "z-index",
+    "box-shadow",
+    "text-shadow",
+    "transform",
+    "columns",
+    "column-count",
+    "column-gap",
+    "letter-spacing",
+];
+
+#[derive(Debug, thiserror::Error)]
+pub enum XtcError {
+    #[error("could not run `{command}`: {source}")]
+    Spawn {
+        command: String,
+        #[source]
+        source: std::io::Error,
+    },
+    #[error("converter exited with status {status}: {stderr}")]
+    Failed { status: i32, stderr: String },
+    #[error("converter produced no output at {0}")]
+    NoOutput(PathBuf),
+}
+
+/// Simplify CSS for the X4: no floats/flex/grid, no embedded fonts, larger base
+/// font, generous line-height, hyphenation on (§3.10).
+pub fn simplify_css(css: &str) -> String {
+    let mut out = String::with_capacity(css.len());
+    let mut rest = css;
+    while let Some(open) = rest.find('{') {
+        let selector = &rest[..open];
+        let Some(close) = rest[open..].find('}') else {
+            break;
+        };
+        let body = &rest[open + 1..open + close];
+        rest = &rest[open + close + 1..];
+
+        // `@font-face` (and any other embedded-font rule) is dropped wholesale.
+        if selector.to_ascii_lowercase().contains("@font-face") {
+            continue;
+        }
+        let kept: Vec<&str> = body
+            .split(';')
+            .filter(|decl| !decl.trim().is_empty())
+            .filter(|decl| !is_dropped_declaration(decl))
+            .collect();
+        if kept.is_empty() {
+            continue;
+        }
+        out.push_str(selector.trim_start_matches('\n'));
+        out.push('{');
+        for decl in kept {
+            out.push_str(decl);
+            out.push(';');
+        }
+        out.push('}');
+        out.push('\n');
+    }
+    out
+}
+
+fn is_dropped_declaration(decl: &str) -> bool {
+    let Some((property, value)) = decl.split_once(':') else {
+        return true;
+    };
+    let property = property.trim().to_ascii_lowercase();
+    let value = value.trim().to_ascii_lowercase();
+    if DROPPED_PROPERTIES.contains(&property.as_str()) {
+        return true;
+    }
+    if property == "display" && (value.contains("flex") || value.contains("grid")) {
+        return true;
+    }
+    if property.starts_with("flex") || property.starts_with("grid") {
+        return true;
+    }
+    if property == "font-family" && value.contains("url(") {
+        return true;
+    }
+    false
+}
+
+/// Strip layout constructs the X4 renderer handles poorly from chapter markup,
+/// then soft-hyphenate anything too long for it to wrap (§3.10).
+pub fn simplify_xhtml(xhtml: &str) -> String {
+    break_long_words(&strip_attributes(xhtml, DROPPED_ATTRIBUTES))
+}
+
+/// Insert soft hyphens into words longer than [`MAX_WORD_CHARS`], in text
+/// content only (§3.10).
+fn break_long_words(html: &str) -> String {
+    let mut out = String::with_capacity(html.len());
+    let mut cursor = 0usize;
+    while let Some(rel) = html[cursor..].find('<') {
+        let start = cursor + rel;
+        soften_text(&html[cursor..start], &mut out);
+        let Some(end) = tag_end(html, start) else {
+            out.push_str(&html[start..]);
+            return out;
+        };
+        let tag = &html[start..end];
+        out.push_str(tag);
+        cursor = end;
+        // `<style>`/`<script>` bodies are not prose: copy to the closing tag verbatim.
+        if let Some(name) = raw_text_name(tag)
+            && let Some(close) = find_close_tag(html, cursor, name)
+        {
+            out.push_str(&html[cursor..close]);
+            cursor = close;
+        }
+    }
+    soften_text(&html[cursor..], &mut out);
+    out
+}
+
+/// The element name when `tag` opens a raw-text element, else `None`.
+fn raw_text_name(tag: &str) -> Option<&'static str> {
+    let rest = tag.strip_prefix('<')?;
+    if rest.starts_with('/') {
+        return None;
+    }
+    RAW_TEXT_ELEMENTS.iter().copied().find(|name| {
+        rest.len() >= name.len()
+            && rest[..name.len()].eq_ignore_ascii_case(name)
+            // Only `<style>` and `<style type=…>`, never `<styled-thing>`.
+            && rest[name.len()..]
+                .starts_with([' ', '\t', '\n', '\r', '>', '/'])
+    })
+}
+
+/// Byte offset of `</name` at or after `from`, else `None`.
+fn find_close_tag(html: &str, from: usize, name: &str) -> Option<usize> {
+    let needle = format!("</{name}");
+    let hay = html.get(from..)?.to_ascii_lowercase();
+    hay.find(&needle).map(|i| from + i)
+}
+
+/// Copy `text` into `out`, soft-hyphenating any over-long word.
+fn soften_text(text: &str, out: &mut String) {
+    // Byte length bounds character count, so a short run holds no long word.
+    if text.len() <= MAX_WORD_CHARS {
+        out.push_str(text);
+        return;
+    }
+    let mut word_start = 0usize;
+    for (i, c) in text.char_indices() {
+        if c.is_whitespace() {
+            push_soft_hyphenated(&text[word_start..i], out);
+            out.push(c);
+            word_start = i + c.len_utf8();
+        }
+    }
+    push_soft_hyphenated(&text[word_start..], out);
+}
+
+fn push_soft_hyphenated(word: &str, out: &mut String) {
+    if word.len() <= MAX_WORD_CHARS {
+        out.push_str(word);
+        return;
+    }
+    let mut units = 0usize;
+    let mut rest = word;
+    while !rest.is_empty() {
+        if units == MAX_WORD_CHARS {
+            out.push(SOFT_HYPHEN);
+            units = 0;
+        }
+        let take =
+            entity_len(rest).unwrap_or_else(|| rest.chars().next().map_or(1, char::len_utf8));
+        out.push_str(&rest[..take]);
+        rest = &rest[take..];
+        units += 1;
+    }
+}
+
+/// Byte length of the `&…;` reference starting `s`, if there is one.
+///
+/// A character reference is one unit: splitting `&amp;` down the middle would
+/// turn it into literal text and break the XHTML.
+fn entity_len(s: &str) -> Option<usize> {
+    /// `&thickapprox;` is 13 bytes; nothing we emit is longer.
+    const MAX_ENTITY_BYTES: usize = 16;
+    let bytes = s.as_bytes();
+    if bytes.first() != Some(&b'&') {
+        return None;
+    }
+    bytes
+        .iter()
+        .take(MAX_ENTITY_BYTES)
+        .position(|&b| b == b';')
+        .map(|p| p + 1)
+}
+
+/// Remove the named attributes from every tag, leaving the rest verbatim.
+fn strip_attributes(html: &str, drop: &[&str]) -> String {
+    let mut out = String::with_capacity(html.len());
+    let mut cursor = 0usize;
+    while let Some(rel) = html[cursor..].find('<') {
+        let start = cursor + rel;
+        out.push_str(&html[cursor..start]);
+        let Some(end) = tag_end(html, start) else {
+            out.push_str(&html[start..]);
+            return out;
+        };
+        out.push_str(&filter_tag(&html[start..end], drop));
+        cursor = end;
+    }
+    out.push_str(&html[cursor..]);
+    out
+}
+
+/// `<p style="x" class="y">` → `<p class="y">`.
+fn filter_tag(tag: &str, drop: &[&str]) -> String {
+    if tag.starts_with("<!") || tag.starts_with("<?") || tag.starts_with("</") {
+        return tag.to_string();
+    }
+    let bytes = tag.as_bytes();
+    let mut out = String::with_capacity(tag.len());
+    let mut i = 1; // past '<'
+    while i < bytes.len() && !bytes[i].is_ascii_whitespace() && bytes[i] != b'>' {
+        i += 1;
+    }
+    out.push_str(&tag[..i]);
+
+    while i < bytes.len() {
+        let ws_start = i;
+        while i < bytes.len() && bytes[i].is_ascii_whitespace() {
+            i += 1;
+        }
+        if i >= bytes.len() || bytes[i] == b'>' || bytes[i] == b'/' {
+            out.push_str(&tag[ws_start..]);
+            return out;
+        }
+        let name_start = i;
+        while i < bytes.len()
+            && !bytes[i].is_ascii_whitespace()
+            && bytes[i] != b'='
+            && bytes[i] != b'>'
+            && bytes[i] != b'/'
+        {
+            i += 1;
+        }
+        let name = tag[name_start..i].to_ascii_lowercase();
+        let mut after_name = i;
+        while after_name < bytes.len() && bytes[after_name].is_ascii_whitespace() {
+            after_name += 1;
+        }
+        if after_name < bytes.len() && bytes[after_name] == b'=' {
+            i = after_name + 1;
+            while i < bytes.len() && bytes[i].is_ascii_whitespace() {
+                i += 1;
+            }
+            if i < bytes.len() && (bytes[i] == b'"' || bytes[i] == b'\'') {
+                let quote = bytes[i];
+                i += 1;
+                while i < bytes.len() && bytes[i] != quote {
+                    i += 1;
+                }
+                i = (i + 1).min(bytes.len());
+            } else {
+                while i < bytes.len() && !bytes[i].is_ascii_whitespace() && bytes[i] != b'>' {
+                    i += 1;
+                }
+            }
+        }
+        if !drop.contains(&name.as_str()) {
+            out.push_str(&tag[ws_start..i]);
+        }
+    }
+    out
+}
+
+/// Full argv for the converter: `command` + `args` + `<input> -o <output> -f <format>`
+/// (+ `-c <settings>` when configured) (§3.11).
+pub fn build_command(cfg: &XtcConfig, input: &Path, output: &Path) -> (String, Vec<String>) {
+    let mut args = cfg.args.clone();
+    args.push(input.display().to_string());
+    args.push("-o".to_string());
+    args.push(output.display().to_string());
+    args.push("-f".to_string());
+    args.push(cfg.format.as_str().to_string());
+    if let Some(settings) = &cfg.settings {
+        args.push("-c".to_string());
+        args.push(settings.display().to_string());
+    }
+    (cfg.command.clone(), args)
+}
+
+/// Output path for an input EPUB: `{out_dir}/{stem}.{xtc|xtch}` (§3.11).
+pub fn output_path(cfg: &XtcConfig, input: &Path, out_dir: &Path) -> PathBuf {
+    let stem = input
+        .file_stem()
+        .map(|s| s.to_string_lossy().to_string())
+        .unwrap_or_else(|| "issue".to_string());
+    out_dir.join(format!("{stem}.{}", cfg.format.extension()))
+}
+
+/// Convert the X4 EPUB to `.xtc`/`.xtch` via `tokio::process::Command` (§3.11).
+///
+/// Callers treat every error as a warning and continue — XTC is a bonus
+/// artifact, the X4 can always fall back to the X4 EPUB from BookOrbit.
+pub async fn convert(cfg: &XtcConfig, input: &Path, out_dir: &Path) -> Result<PathBuf, XtcError> {
+    if cfg.settings.is_none() {
+        // The converter refuses to start without `font.path`, which can only be
+        // supplied through the settings JSON: `-c` is mandatory in practice even
+        // though the flag is optional.
+        tracing::warn!(
+            "xtc.settings is unset; epub-to-xtc-converter requires a settings \
+             file with a font.path and will refuse to run without one"
+        );
+    }
+    let output = output_path(cfg, input, out_dir);
+    if let Some(parent) = output.parent() {
+        std::fs::create_dir_all(parent).map_err(|e| XtcError::Spawn {
+            command: parent.display().to_string(),
+            source: e,
+        })?;
+    }
+    let (command, args) = build_command(cfg, input, &output);
+    tracing::info!(command, ?args, "running the xtc converter");
+
+    let result = tokio::process::Command::new(&command)
+        .args(&args)
+        .output()
+        .await
+        .map_err(|e| XtcError::Spawn {
+            command: command.clone(),
+            source: e,
+        })?;
+    if !result.status.success() {
+        return Err(XtcError::Failed {
+            status: result.status.code().unwrap_or(-1),
+            stderr: String::from_utf8_lossy(&result.stderr)
+                .lines()
+                .take(5)
+                .collect::<Vec<_>>()
+                .join(" | "),
+        });
+    }
+    if !output.exists() {
+        return Err(XtcError::NoOutput(output));
+    }
+    tracing::info!(path = %output.display(), "xtc conversion complete");
+    Ok(output)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::config::XtcFormat;
+
+    fn cfg() -> XtcConfig {
+        XtcConfig {
+            enabled: true,
+            command: "node".into(),
+            args: vec![
+                "/opt/epub-to-xtc-converter/cli/index.js".into(),
+                "convert".into(),
+            ],
+            format: XtcFormat::Xtch,
+            settings: None,
+        }
+    }
+
+    #[test]
+    fn builds_the_documented_converter_argv() {
+        let (command, args) = build_command(
+            &cfg(),
+            Path::new("/out/The Daily EPUB - 2026-08-15 (X4).epub"),
+            Path::new("/xtc/The Daily EPUB - 2026-08-15 (X4).xtch"),
+        );
+        assert_eq!(command, "node");
+        assert_eq!(
+            args,
+            vec![
+                "/opt/epub-to-xtc-converter/cli/index.js",
+                "convert",
+                "/out/The Daily EPUB - 2026-08-15 (X4).epub",
+                "-o",
+                "/xtc/The Daily EPUB - 2026-08-15 (X4).xtch",
+                "-f",
+                "xtch",
+            ]
+        );
+    }
+
+    #[test]
+    fn settings_file_is_passed_with_dash_c() {
+        let mut cfg = cfg();
+        cfg.settings = Some(PathBuf::from("/etc/xtc.json"));
+        cfg.format = XtcFormat::Xtc;
+        let (_, args) = build_command(&cfg, Path::new("in.epub"), Path::new("out.xtc"));
+        assert_eq!(args[args.len() - 4..], ["-f", "xtc", "-c", "/etc/xtc.json"]);
+    }
+
+    #[test]
+    fn output_path_follows_the_format_extension() {
+        let out = output_path(&cfg(), Path::new("/out/Issue (X4).epub"), Path::new("/xtc"));
+        assert_eq!(out, PathBuf::from("/xtc/Issue (X4).xtch"));
+    }
+
+    /// The pipeline turns every one of these into a report warning, so the error
+    /// has to say which of them happened (§3.11).
+    #[tokio::test]
+    async fn converter_failures_are_distinguishable() {
+        let dir = tempfile::tempdir().unwrap();
+
+        let mut missing = cfg();
+        missing.command = "definitely-not-a-real-binary-9f3b".into();
+        missing.args.clear();
+        match convert(&missing, Path::new("in.epub"), dir.path()).await {
+            Err(XtcError::Spawn { command, .. }) => {
+                assert_eq!(command, "definitely-not-a-real-binary-9f3b")
+            }
+            other => panic!("expected a spawn failure, got {other:?}"),
+        }
+
+        let mut failing = cfg();
+        failing.command = "false".into();
+        failing.args.clear();
+        match convert(&failing, Path::new("in.epub"), dir.path()).await {
+            Err(XtcError::Failed { status, .. }) => assert_ne!(status, 0),
+            other => panic!("expected a nonzero exit, got {other:?}"),
+        }
+
+        // Exit 0 but nothing written is its own error, not a silent success.
+        let mut silent = cfg();
+        silent.command = "true".into();
+        silent.args.clear();
+        match convert(&silent, Path::new("in.epub"), dir.path()).await {
+            Err(XtcError::NoOutput(path)) => assert_eq!(path, dir.path().join("in.xtch")),
+            other => panic!("expected NoOutput, got {other:?}"),
+        }
+    }
+
+    #[test]
+    fn css_simplification_drops_layout_and_fonts() {
+        let css = r#"
+@font-face { font-family: "Serif"; src: url(serif.woff2); }
+.a { float: left; color: #000; }
+.b { display: flex; flex-direction: row; }
+.c { position: absolute; margin: 1em; }
+.d { float: right; }
+"#;
+        let out = simplify_css(css);
+        assert!(!out.contains("@font-face"));
+        assert!(!out.contains("float"));
+        assert!(!out.contains("flex"));
+        assert!(!out.contains("position"));
+        assert!(out.contains("color: #000"));
+        assert!(out.contains("margin: 1em"));
+        // A rule left with no declarations disappears entirely.
+        assert!(!out.contains(".d"));
+    }
+
+    #[test]
+    fn xhtml_simplification_drops_layout_attributes_only() {
+        let input = r#"<p class="meta" style="float:left" align="center">a &amp; b</p><img src="x.jpg" alt="An x" width="900"/>"#;
+        let out = simplify_xhtml(input);
+        assert_eq!(
+            out,
+            r#"<p class="meta">a &amp; b</p><img src="x.jpg" alt="An x"/>"#
+        );
+    }
+
+    /// The shipped X4 stylesheet must already satisfy the X4 rules, so the
+    /// simplifier is a no-op over it (§3.10).
+    #[test]
+    fn the_shipped_x4_stylesheet_is_already_simplified() {
+        let css = super::super::build::stylesheet(crate::types::Edition::X4);
+        let simplified = simplify_css(css);
+        assert_eq!(
+            css.matches(';').count(),
+            simplified.matches(';').count(),
+            "the simplifier dropped a declaration from style-x4.css"
+        );
+        // Declarations only — the file's header comment mentions what it avoids.
+        for banned in [
+            "float:",
+            "clear:",
+            "display: flex",
+            "display: grid",
+            "position:",
+            "@font-face",
+        ] {
+            assert!(!css.contains(banned), "style-x4.css must not use {banned}");
+        }
+    }
+
+    /// The firmware stops wrapping past 200 characters and the line runs off
+    /// the screen, so long tokens get soft hyphens (§3.10).
+    #[test]
+    fn over_long_words_are_soft_hyphenated() {
+        let long = "a".repeat(450);
+        let out = simplify_xhtml(&format!("<p>short {long} tail</p>"));
+        assert_eq!(out.matches(SOFT_HYPHEN).count(), 2);
+        // Only the long token is touched; the rest of the line is byte-identical.
+        assert!(out.starts_with("<p>short "));
+        assert!(out.ends_with(" tail</p>"));
+        assert!(!out.contains(&format!("short{SOFT_HYPHEN}")));
+        // Removing the hyphens gets the original word back — nothing was lost.
+        assert!(out.replace(SOFT_HYPHEN, "").contains(&long));
+        // Every run between hyphens is within the limit.
+        for run in out.replace(['<', '>'], " ").split_whitespace() {
+            for piece in run.split(SOFT_HYPHEN) {
+                assert!(piece.chars().count() <= MAX_WORD_CHARS, "{}", piece.len());
+            }
+        }
+        // Words at the limit are left alone.
+        let exact = "b".repeat(MAX_WORD_CHARS);
+        assert_eq!(
+            simplify_xhtml(&format!("<p>{exact} {exact}</p>")),
+            format!("<p>{exact} {exact}</p>")
+        );
+    }
+
+    /// A soft hyphen dropped into `&amp;` would turn it into literal text and
+    /// break the XHTML, so character references are indivisible (§3.10).
+    #[test]
+    fn entities_and_markup_survive_word_breaking() {
+        // 120 entities: the raw string is far past the limit, but it is only
+        // 120 units, so no break is due — and the entities stay intact.
+        let entities = "&amp;".repeat(120);
+        let out = simplify_xhtml(&format!("<p>{entities}</p>"));
+        assert!(!out.contains(SOFT_HYPHEN));
+        assert_eq!(out.matches("&amp;").count(), 120);
+
+        // Past the limit the breaks land between entities, never inside one.
+        let out = simplify_xhtml(&format!("<p>{}</p>", "&amp;".repeat(260)));
+        assert_eq!(out.matches("&amp;").count(), 260);
+        assert_eq!(out.matches(SOFT_HYPHEN).count(), 1);
+        assert!(!out.contains(&format!("&amp{SOFT_HYPHEN}")));
+        assert!(!out.contains(&format!("&{SOFT_HYPHEN}")));
+
+        // Attribute values are not text content and must not be rewritten.
+        let href = "https://example.com/".to_string() + &"z".repeat(300);
+        let out = simplify_xhtml(&format!("<p><a href=\"{href}\">link</a></p>"));
+        assert!(out.contains(&format!("href=\"{href}\"")), "{out}");
+        assert!(!out.contains(SOFT_HYPHEN));
+    }
+
+    /// Stylesheets and scripts are code: a soft hyphen inside one corrupts it.
+    #[test]
+    fn raw_text_elements_are_copied_through_verbatim() {
+        let css = format!("p{{content:\"{}\"}}", "x".repeat(400));
+        let out = simplify_xhtml(&format!("<style type=\"text/css\">{css}</style>"));
+        assert!(out.contains(&css), "{out}");
+        assert!(!out.contains(SOFT_HYPHEN));
+
+        // A tag that merely starts with the same letters is ordinary prose.
+        let long = "y".repeat(400);
+        let out = simplify_xhtml(&format!("<styled-note>{long}</styled-note>"));
+        assert_eq!(out.matches(SOFT_HYPHEN).count(), 1);
+    }
+
+    /// `/* … */` runs, which are prose and may contain anything.
+    fn strip_css_comments(css: &str) -> String {
+        let mut out = String::with_capacity(css.len());
+        let mut rest = css;
+        while let Some(open) = rest.find("/*") {
+            out.push_str(&rest[..open]);
+            match rest[open + 2..].find("*/") {
+                Some(close) => rest = &rest[open + 4 + close..],
+                None => return out,
+            }
+        }
+        out.push_str(rest);
+        out
+    }
+
+    /// The X4's CSS engine understands `tag`, `.class` and `tag.class` only —
+    /// a descendant combinator silently drops the whole rule (§3.10).
+    #[test]
+    fn the_x4_stylesheet_uses_no_descendant_selectors() {
+        let css = strip_css_comments(super::super::build::stylesheet(crate::types::Edition::X4));
+        for (i, _) in css.match_indices('{') {
+            let selector_list = css[..i].rsplit('}').next().unwrap_or_default().trim();
+            for selector in selector_list.split(',') {
+                let selector = selector.trim();
+                if selector.is_empty() || selector.starts_with('@') {
+                    continue;
+                }
+                assert!(
+                    !selector.contains(char::is_whitespace),
+                    "descendant selector {selector:?} will not match on the X4"
+                );
+                for combinator in ['>', '+', '~'] {
+                    assert!(
+                        !selector.contains(combinator),
+                        "combinator {combinator:?} in {selector:?} is unsupported on the X4"
+                    );
+                }
+            }
+        }
+    }
+
+    #[test]
+    fn simplification_leaves_prologue_and_text_untouched() {
+        let input =
+            "<?xml version=\"1.0\"?>\n<!DOCTYPE html>\n<html><body><p>2 &lt; 3</p></body></html>";
+        assert_eq!(simplify_xhtml(input), input);
+    }
+}
diff --git a/src/extract.rs b/src/extract.rs
new file mode 100644
index 0000000..5dfde4b
--- /dev/null
+++ b/src/extract.rs
@@ -0,0 +1,713 @@
+//! Content extraction, sanitization and word counting (spec §3.3).
+//!
+//! Priority order per article: Miniflux content if it looks like full text →
+//! fetch + `dom_smoothie` readability → feed excerpt with a "(excerpt only)" note.
+
+use std::collections::HashSet;
+use std::sync::Arc;
+use std::time::Duration;
+
+use futures::StreamExt;
+use scraper::{Html, Node, Selector};
+use url::Url;
+
+use crate::types::{Article, ExtractMethod, Extracted};
+
+/// Word count at or above which Miniflux content is treated as full text (§3.3).
+pub const FULL_TEXT_MIN_WORDS: i64 = 250;
+/// Maximum bytes downloaded when fetching an article page (§3.3).
+pub const MAX_FETCH_BYTES: usize = 3 * 1024 * 1024;
+/// Maximum images collected per article (§3.3).
+pub const MAX_IMAGES_PER_ARTICLE: usize = 12;
+/// Note appended to bodies we could only excerpt (§3.3).
+pub const EXCERPT_NOTE: &str = "(excerpt only — read online)";
+
+/// Article pages are fetched with a desktop UA, not our bot UA (§3.3).
+pub const DESKTOP_UA: &str = "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36";
+/// Per-fetch timeout for article pages (§3.3).
+pub const FETCH_TIMEOUT: Duration = Duration::from_secs(10);
+/// Parallel article fetches during the extraction stage.
+pub const CONCURRENCY: usize = 8;
+/// Below this many words, a page on a [`DEFAULT_PAYWALL_DOMAINS`] host is a stub (§3.3).
+pub const PAYWALL_MAX_WORDS: i64 = 400;
+/// Any page this short is an excerpt regardless of host (§3.3).
+pub const EXCERPT_MAX_WORDS: i64 = 120;
+
+/// Hosts that routinely serve a teaser instead of the article (§3.3).
+///
+/// The built-in list; `curation.paywall_domains` from the config file is merged
+/// on top of it by [`Extractor::new`] / [`Extractor::offline`] (§3.3).
+pub const DEFAULT_PAYWALL_DOMAINS: &[&str] = &[
+    "nytimes.com",
+    "wsj.com",
+    "ft.com",
+    "economist.com",
+    "bloomberg.com",
+    "washingtonpost.com",
+    "newyorker.com",
+    "theatlantic.com",
+    "wired.com",
+    "businessinsider.com",
+    "barrons.com",
+    "forbes.com",
+    "latimes.com",
+    "bostonglobe.com",
+    "theinformation.com",
+    "hbr.org",
+    "nature.com",
+    "science.org",
+    "sciencedirect.com",
+    "seekingalpha.com",
+    "statnews.com",
+    "thetimes.co.uk",
+    "telegraph.co.uk",
+    "medium.com",
+    "towardsdatascience.com",
+];
+
+#[derive(Debug, thiserror::Error)]
+pub enum ExtractError {
+    #[error("fetch failed: {0}")]
+    Http(#[from] reqwest::Error),
+    #[error("response exceeded {MAX_FETCH_BYTES} bytes")]
+    TooLarge,
+    #[error("readability found no main content")]
+    NoContent,
+    #[error("server returned {0}")]
+    Status(u16),
+    #[error("response was {0}, not html")]
+    NotHtml(String),
+    #[error("fetching is disabled on this extractor")]
+    FetchDisabled,
+}
+
+/// Counters for the extraction stage, folded into the run report.
+#[derive(Debug, Clone, Default, PartialEq, Eq)]
+pub struct ExtractStats {
+    pub from_miniflux: usize,
+    pub from_readability: usize,
+    pub excerpt_only: usize,
+    pub fetch_failures: usize,
+}
+
+/// The extraction stage for one article (§3.3).
+#[derive(Debug, Clone)]
+pub struct Extractor {
+    /// `None` disables the network path entirely (tests, `--dry-run` reruns).
+    http: Option<reqwest::Client>,
+    /// Hosts known to paywall, used by the [`looks_paywalled`] heuristic.
+    paywall_domains: Vec<String>,
+}
+
+impl Extractor {
+    pub fn new(http: reqwest::Client, paywall_domains: Vec<String>) -> Self {
+        Self {
+            http: Some(http),
+            paywall_domains: merge_paywall_domains(paywall_domains),
+        }
+    }
+
+    /// An extractor that never touches the network: the Miniflux/excerpt paths only.
+    ///
+    /// This is what tests use, and it keeps the fetch step injectable (§6 testing).
+    pub fn offline(paywall_domains: Vec<String>) -> Self {
+        Self {
+            http: None,
+            paywall_domains: merge_paywall_domains(paywall_domains),
+        }
+    }
+
+    pub fn can_fetch(&self) -> bool {
+        self.http.is_some()
+    }
+
+    /// Run the full priority order for one article and return its body (§3.3).
+    ///
+    /// Never fails the run: on fetch/readability failure it degrades to the feed
+    /// excerpt (notes §3).
+    pub async fn extract(&self, article: &Article) -> Extracted {
+        let span = tracing::debug_span!("extract", entry = article.best_entry_id);
+        let _guard = span.enter();
+
+        // 1. Miniflux content, when it already looks like full text.
+        let feed_html = sanitize_with_base(&article.content_html, &article.url);
+        let feed_words = word_count(&feed_html);
+        if feed_words >= FULL_TEXT_MIN_WORDS {
+            return self.finish(article, feed_html, feed_words, ExtractMethod::Miniflux);
+        }
+
+        // 2. Fetch the page and run readability over it.
+        if self.can_fetch() {
+            match self.fetch_readable(&article.url).await {
+                Ok(html) => {
+                    let clean = sanitize_with_base(&html, &article.url);
+                    let words = word_count(&clean);
+                    if words > feed_words && words > 0 {
+                        return self.finish(article, clean, words, ExtractMethod::Readability);
+                    }
+                    tracing::debug!(words, feed_words, "readability was not an improvement");
+                }
+                Err(e) => tracing::debug!(url = %article.url, "extraction fetch failed: {e}"),
+            }
+        }
+
+        // 3. Excerpt fallback. Re-extraction must not stack up notes (notes §12).
+        let body = if feed_html.trim().is_empty() {
+            format!("<p>{EXCERPT_NOTE}</p>")
+        } else if feed_html.contains(EXCERPT_NOTE) {
+            feed_html
+        } else {
+            format!("{feed_html}<p>{EXCERPT_NOTE}</p>")
+        };
+        let words = word_count(&body);
+        let mut out = self.finish(article, body, words, ExtractMethod::Excerpt);
+        out.excerpt_only = true;
+        out
+    }
+
+    /// Assemble the [`Extracted`] value once a body has been chosen.
+    fn finish(
+        &self,
+        article: &Article,
+        content_html: String,
+        words: i64,
+        method: ExtractMethod,
+    ) -> Extracted {
+        let image_urls = collect_image_urls(&content_html, &article.url);
+        let excerpt_only = method == ExtractMethod::Excerpt
+            || looks_paywalled(&article.url, words, &self.paywall_domains);
+        Extracted {
+            content_html,
+            word_count: words,
+            excerpt_only,
+            image_urls,
+            method,
+        }
+    }
+
+    /// Extract every article in place, up to [`CONCURRENCY`] fetches at a time (§3.3).
+    pub async fn extract_all(&self, articles: &mut [Article]) -> ExtractStats {
+        let span = tracing::info_span!("extract_all", articles = articles.len());
+        let _guard = span.enter();
+
+        let inputs: Vec<Article> = articles.to_vec();
+        let results: Vec<(usize, Extracted)> = futures::stream::iter(inputs.iter().enumerate())
+            .map(|(i, article)| async move { (i, self.extract(article).await) })
+            .buffer_unordered(CONCURRENCY)
+            .collect()
+            .await;
+
+        let mut stats = ExtractStats::default();
+        for (i, extracted) in results {
+            match extracted.method {
+                ExtractMethod::Miniflux => stats.from_miniflux += 1,
+                ExtractMethod::Readability => stats.from_readability += 1,
+                ExtractMethod::Excerpt => stats.fetch_failures += 1,
+            }
+            if extracted.excerpt_only {
+                stats.excerpt_only += 1;
+            }
+            apply(&mut articles[i], extracted);
+        }
+        tracing::info!(
+            miniflux = stats.from_miniflux,
+            readability = stats.from_readability,
+            excerpt_only = stats.excerpt_only,
+            "extraction complete"
+        );
+        stats
+    }
+
+    /// Fetch `url` (10s timeout, desktop UA, [`MAX_FETCH_BYTES`] cap) and run
+    /// `dom_smoothie` readability over it (§3.3).
+    pub async fn fetch_readable(&self, url: &str) -> Result<String, ExtractError> {
+        let Some(http) = &self.http else {
+            return Err(ExtractError::FetchDisabled);
+        };
+        let mut response = http
+            .get(url)
+            .header(reqwest::header::USER_AGENT, DESKTOP_UA)
+            .header(
+                reqwest::header::ACCEPT,
+                "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
+            )
+            .timeout(FETCH_TIMEOUT)
+            .send()
+            .await?;
+        if !response.status().is_success() {
+            return Err(ExtractError::Status(response.status().as_u16()));
+        }
+        if let Some(ct) = response
+            .headers()
+            .get(reqwest::header::CONTENT_TYPE)
+            .and_then(|v| v.to_str().ok())
+        {
+            let ct = ct.to_ascii_lowercase();
+            if !(ct.contains("html") || ct.contains("xml") || ct.contains("text/plain")) {
+                return Err(ExtractError::NotHtml(ct));
+            }
+        }
+
+        let mut body: Vec<u8> = Vec::new();
+        while let Some(chunk) = response.chunk().await? {
+            if body.len() + chunk.len() > MAX_FETCH_BYTES {
+                return Err(ExtractError::TooLarge);
+            }
+            body.extend_from_slice(&chunk);
+        }
+        let html = String::from_utf8_lossy(&body).into_owned();
+        readability(&html, url)
+    }
+}
+
+/// Run `dom_smoothie` over a fetched page and return its main-content HTML (§3.3).
+pub fn readability(html: &str, url: &str) -> Result<String, ExtractError> {
+    let config = dom_smoothie::Config {
+        max_elements_to_parse: 60_000,
+        ..Default::default()
+    };
+    let mut readability = dom_smoothie::Readability::new(html, Some(url), Some(config))
+        .map_err(|_| ExtractError::NoContent)?;
+    let parsed = readability.parse().map_err(|_| ExtractError::NoContent)?;
+    let content = parsed.content.to_string();
+    if content.trim().is_empty() {
+        return Err(ExtractError::NoContent);
+    }
+    Ok(content)
+}
+
+/// Copy an [`Extracted`] onto its [`Article`].
+pub fn apply(article: &mut Article, extracted: Extracted) {
+    article.image_count = extracted.image_urls.len() as i64;
+    article.image_urls = extracted.image_urls;
+    article.content_html = extracted.content_html;
+    article.word_count = extracted.word_count;
+    article.excerpt_only = extracted.excerpt_only;
+    article.extract_method = extracted.method;
+}
+
+fn merge_paywall_domains(configured: Vec<String>) -> Vec<String> {
+    let mut domains: Vec<String> = DEFAULT_PAYWALL_DOMAINS
+        .iter()
+        .map(|d| (*d).to_string())
+        .collect();
+    for d in configured {
+        let d = d.trim().to_ascii_lowercase();
+        if !d.is_empty() && !domains.contains(&d) {
+            domains.push(d);
+        }
+    }
+    domains
+}
+
+// ---------------------------------------------------------------------------
+// Sanitization (§3.3)
+// ---------------------------------------------------------------------------
+
+/// Tags the EPUB templates accept (§3.3).
+pub const ALLOWED_TAGS: &[&str] = &[
+    "p",
+    "h1",
+    "h2",
+    "h3",
+    "h4",
+    "ul",
+    "ol",
+    "li",
+    "blockquote",
+    "pre",
+    "code",
+    "em",
+    "strong",
+    "a",
+    "img",
+    "figure",
+    "figcaption",
+    "table",
+    "thead",
+    "tbody",
+    "tr",
+    "th",
+    "td",
+    "caption",
+    "hr",
+    "br",
+];
+
+fn builder() -> ammonia::Builder<'static> {
+    let mut tag_attributes: std::collections::HashMap<&str, HashSet<&str>> =
+        std::collections::HashMap::new();
+    tag_attributes.insert("a", ["href", "title"].into_iter().collect());
+    tag_attributes.insert("img", ["src", "alt", "title"].into_iter().collect());
+    tag_attributes.insert("th", ["colspan", "rowspan", "scope"].into_iter().collect());
+    tag_attributes.insert("td", ["colspan", "rowspan"].into_iter().collect());
+
+    let mut b = ammonia::Builder::default();
+    b.tags(ALLOWED_TAGS.iter().copied().collect())
+        .tag_attributes(tag_attributes)
+        .generic_attributes(HashSet::new())
+        .link_rel(None)
+        .strip_comments(true);
+    b
+}
+
+/// Sanitize to the safe XHTML subset the EPUB templates allow (§3.3).
+///
+/// Allowed: `p`, `h1`–`h4`, `ul`/`ol`/`li`, `blockquote`, `pre`, `code`, `em`,
+/// `strong`, `a`, `img`, `figure`, `figcaption`, table basics, `hr`, `br`.
+pub fn sanitize(html: &str) -> String {
+    builder().clean(html).to_string()
+}
+
+/// [`sanitize`], additionally rewriting relative `href`/`src` against `base_url`
+/// so the EPUB (which has no base URL) still resolves them (§3.3).
+pub fn sanitize_with_base(html: &str, base_url: &str) -> String {
+    match Url::parse(base_url) {
+        Ok(base) => builder()
+            .url_relative(ammonia::UrlRelative::RewriteWithBase(base))
+            .clean(html)
+            .to_string(),
+        Err(_) => sanitize(html),
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Text measurement (§3.3)
+// ---------------------------------------------------------------------------
+
+/// Visible text of an HTML fragment, entities decoded, `script`/`style` skipped.
+pub fn html_to_text(html: &str) -> String {
+    let document = Html::parse_fragment(html);
+    let mut out = String::with_capacity(html.len() / 2);
+    for node in document.tree.nodes() {
+        let Node::Text(text) = node.value() else {
+            continue;
+        };
+        let hidden = node.ancestors().any(|a| match a.value() {
+            Node::Element(e) => matches!(e.name(), "script" | "style" | "noscript"),
+            _ => false,
+        });
+        if hidden {
+            continue;
+        }
+        out.push_str(text);
+        out.push(' ');
+    }
+    out
+}
+
+/// Count words in rendered text (tags stripped) (§3.3).
+pub fn word_count(html: &str) -> i64 {
+    html_to_text(html)
+        .split_whitespace()
+        .filter(|w| w.chars().any(char::is_alphanumeric))
+        .count() as i64
+}
+
+/// Absolute image URLs referenced by `html`, resolved against `base_url`,
+/// capped at [`MAX_IMAGES_PER_ARTICLE`] (§3.3).
+pub fn collect_image_urls(html: &str, base_url: &str) -> Vec<String> {
+    let Ok(selector) = Selector::parse("img") else {
+        return Vec::new();
+    };
+    let base = Url::parse(base_url).ok();
+    let document = Html::parse_fragment(html);
+    let mut seen: HashSet<String> = HashSet::new();
+    let mut out: Vec<String> = Vec::new();
+    for element in document.select(&selector) {
+        let raw = element
+            .value()
+            .attr("src")
+            .or_else(|| element.value().attr("data-src"))
+            .map(str::trim)
+            .filter(|s| !s.is_empty());
+        let Some(raw) = raw else { continue };
+        let resolved = match Url::parse(raw) {
+            Ok(u) => Some(u),
+            Err(_) => base.as_ref().and_then(|b| b.join(raw).ok()),
+        };
+        let Some(url) = resolved.filter(|u| matches!(u.scheme(), "http" | "https")) else {
+            continue;
+        };
+        let url = url.to_string();
+        if seen.insert(url.clone()) {
+            out.push(url);
+        }
+        if out.len() >= MAX_IMAGES_PER_ARTICLE {
+            break;
+        }
+    }
+    out
+}
+
+/// Heuristic paywall detection: very short text on a known paywall domain (§3.3).
+///
+/// Two rules: anything under [`EXCERPT_MAX_WORDS`] is a stub whatever the host,
+/// and anything under [`PAYWALL_MAX_WORDS`] on a `paywall_domains` host is a teaser.
+pub fn looks_paywalled(url: &str, word_count: i64, paywall_domains: &[String]) -> bool {
+    if word_count <= 0 {
+        return true;
+    }
+    if word_count < EXCERPT_MAX_WORDS {
+        return true;
+    }
+    if word_count >= PAYWALL_MAX_WORDS {
+        return false;
+    }
+    let Some(host) = Url::parse(url)
+        .ok()
+        .and_then(|u| u.host_str().map(|h| h.to_ascii_lowercase()))
+    else {
+        return false;
+    };
+    paywall_domains
+        .iter()
+        .any(|d| host == *d || host.ends_with(&format!(".{d}")))
+}
+
+/// Shared-ownership helper for callers that want one extractor across tasks.
+pub fn shared(extractor: Extractor) -> Arc<Extractor> {
+    Arc::new(extractor)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::types::SourceKind;
+    use jiff::Timestamp;
+
+    fn ts() -> Timestamp {
+        "2026-08-15T05:30:00Z".parse().unwrap()
+    }
+
+    fn article(url: &str, content: &str) -> Article {
+        Article {
+            id: 0,
+            canonical_url: url.into(),
+            title: "T".into(),
+            best_entry_id: 1,
+            content_html: content.into(),
+            word_count: 0,
+            excerpt_only: false,
+            image_count: 0,
+            sources: vec![crate::types::SourceRef {
+                entry_id: 1,
+                feed_id: 1,
+                feed_title: "Feed".into(),
+                category: None,
+                kind: SourceKind::Feed,
+            }],
+            first_seen: ts(),
+            url: url.into(),
+            author: None,
+            feed_id: 1,
+            feed_title: "Feed".into(),
+            category: None,
+            published_at: None,
+            comments_url: None,
+            image_urls: vec![],
+            social: vec![],
+            extract_method: ExtractMethod::Miniflux,
+        }
+    }
+
+    fn long_body(words: usize) -> String {
+        format!("<p>{}</p>", "lorem ".repeat(words))
+    }
+
+    #[test]
+    fn sanitize_keeps_the_allowlist_and_drops_everything_else() {
+        let dirty = r#"
+            <h1>Title</h1><h5>too deep</h5>
+            <p class="x" onclick="evil()">Hello <em>there</em> <strong>you</strong></p>
+            <script>alert(1)</script><style>p{color:red}</style>
+            <div><span>unwrapped</span></div>
+            <ul><li>one</li></ul><ol><li>two</li></ol>
+            <blockquote>quote</blockquote><pre><code>fn main() {}</code></pre>
+            <table><thead><tr><th>h</th></tr></thead><tbody><tr><td>c</td></tr></tbody></table>
+            <figure><img src="https://x.dev/a.png" alt="a" width="10"><figcaption>cap</figcaption></figure>
+            <a href="https://x.dev" target="_blank" rel="nofollow">link</a>
+            <a href="javascript:alert(1)">bad</a>
+            <iframe src="https://evil.dev"></iframe><hr><br>
+            <!-- comment -->
+        "#;
+        let clean = sanitize(dirty);
+
+        for keep in [
+            "<h1>",
+            "<p>",
+            "<em>",
+            "<strong>",
+            "<ul>",
+            "<li>",
+            "<ol>",
+            "<blockquote>",
+            "<pre>",
+            "<code>",
+            "<table>",
+            "<th>",
+            "<td>",
+            "<figure>",
+            "<figcaption>",
+            "<hr",
+            "<br",
+        ] {
+            assert!(clean.contains(keep), "expected {keep} in {clean}");
+        }
+        assert!(clean.contains(r#"src="https://x.dev/a.png""#));
+        assert!(clean.contains(r#"alt="a""#));
+        assert!(clean.contains(r#"href="https://x.dev""#));
+
+        for drop in [
+            "<h5",
+            "<script",
+            "<style",
+            "alert(1)",
+            "<div",
+            "<span",
+            "<iframe",
+            "onclick",
+            "class=",
+            "width=",
+            "javascript:",
+            "<!--",
+        ] {
+            assert!(!clean.contains(drop), "did not expect {drop} in {clean}");
+        }
+        // Text inside stripped containers survives; the tags do not.
+        assert!(clean.contains("unwrapped"));
+    }
+
+    #[test]
+    fn sanitize_with_base_absolutizes_urls() {
+        let html = r#"<p><a href="/next">n</a><img src="img/a.png" alt="a"></p>"#;
+        let clean = sanitize_with_base(html, "https://blog.dev/posts/one");
+        assert!(clean.contains(r#"href="https://blog.dev/next""#));
+        assert!(clean.contains(r#"src="https://blog.dev/posts/img/a.png""#));
+        // A bad base degrades to plain sanitization rather than failing.
+        assert!(sanitize_with_base(html, "not a url").contains("/next"));
+    }
+
+    #[test]
+    fn word_count_ignores_markup_and_script() {
+        assert_eq!(word_count("<p>one two three</p>"), 3);
+        assert_eq!(word_count("<p>a</p><script>b c d e</script>"), 1);
+        assert_eq!(word_count("<p>&amp; &mdash; ok</p>"), 1);
+        assert_eq!(word_count(""), 0);
+        assert_eq!(word_count("<p></p>"), 0);
+    }
+
+    #[test]
+    fn image_collection_resolves_and_caps() {
+        let mut html = String::from(r#"<img src="/a.png"><img src="https://cdn.dev/b.png">"#);
+        html.push_str(r#"<img data-src="c.png"><img src="/a.png"><img src="data:image/png;x">"#);
+        for i in 0..20 {
+            html.push_str(&format!(r#"<img src="/n{i}.png">"#));
+        }
+        let urls = collect_image_urls(&html, "https://blog.dev/posts/one");
+        assert_eq!(urls.len(), MAX_IMAGES_PER_ARTICLE);
+        assert_eq!(urls[0], "https://blog.dev/a.png");
+        assert_eq!(urls[1], "https://cdn.dev/b.png");
+        assert_eq!(urls[2], "https://blog.dev/posts/c.png");
+        // Duplicates and data: URIs never appear.
+        assert_eq!(urls.iter().filter(|u| u.ends_with("/a.png")).count(), 1);
+        assert!(!urls.iter().any(|u| u.starts_with("data:")));
+        assert!(collect_image_urls("<p>none</p>", "https://blog.dev").is_empty());
+    }
+
+    #[test]
+    fn paywall_heuristic() {
+        let domains = merge_paywall_domains(vec!["paywalled.dev".into()]);
+        // Known paywall host with a stub body.
+        assert!(looks_paywalled("https://www.nytimes.com/x", 200, &domains));
+        assert!(looks_paywalled("https://paywalled.dev/x", 200, &domains));
+        // Same host, full article.
+        assert!(!looks_paywalled(
+            "https://www.nytimes.com/x",
+            1500,
+            &domains
+        ));
+        // Unknown host with a normal-length body.
+        assert!(!looks_paywalled("https://blog.dev/x", 200, &domains));
+        // Anything this short is an excerpt no matter the host.
+        assert!(looks_paywalled("https://blog.dev/x", 40, &domains));
+        assert!(looks_paywalled("https://blog.dev/x", 0, &domains));
+        // Unparseable URLs never claim a paywall on their own.
+        assert!(!looks_paywalled("nonsense", 900, &domains));
+    }
+
+    #[tokio::test]
+    async fn miniflux_content_wins_when_it_is_full_text() {
+        let extractor = Extractor::offline(vec![]);
+        let article = article("https://blog.dev/p", &long_body(600));
+        let out = extractor.extract(&article).await;
+        assert_eq!(out.method, ExtractMethod::Miniflux);
+        assert!(out.word_count >= FULL_TEXT_MIN_WORDS);
+        assert!(!out.excerpt_only);
+    }
+
+    #[tokio::test]
+    async fn short_content_falls_back_to_the_excerpt_note() {
+        let extractor = Extractor::offline(vec![]);
+        let stub = article("https://blog.dev/p", "<p>Just a teaser.</p>");
+        let out = extractor.extract(&stub).await;
+        assert_eq!(out.method, ExtractMethod::Excerpt);
+        assert!(out.excerpt_only);
+        assert!(out.content_html.contains(EXCERPT_NOTE));
+        assert!(out.content_html.contains("Just a teaser."));
+
+        // Empty feed content still yields a body, never a panic.
+        let empty = article("https://blog.dev/p", "");
+        let out = extractor.extract(&empty).await;
+        assert_eq!(out.method, ExtractMethod::Excerpt);
+        assert!(out.content_html.contains(EXCERPT_NOTE));
+    }
+
+    #[tokio::test]
+    async fn extract_all_applies_results_and_counts() {
+        let extractor = Extractor::offline(vec![]);
+        let mut articles = vec![
+            article("https://blog.dev/full", &long_body(600)),
+            article("https://blog.dev/stub", "<p>teaser</p>"),
+        ];
+        articles[0]
+            .content_html
+            .push_str(r#"<p><img src="/pic.png" alt="p"></p>"#);
+
+        let stats = extractor.extract_all(&mut articles).await;
+        assert_eq!(stats.from_miniflux, 1);
+        assert_eq!(stats.excerpt_only, 1);
+        assert_eq!(articles[0].extract_method, ExtractMethod::Miniflux);
+        assert_eq!(articles[0].image_count, 1);
+        assert_eq!(articles[0].image_urls, ["https://blog.dev/pic.png"]);
+        assert!(articles[0].word_count >= 600);
+        assert_eq!(articles[1].extract_method, ExtractMethod::Excerpt);
+        assert!(articles[1].excerpt_only);
+    }
+
+    #[tokio::test]
+    async fn offline_extractor_never_fetches() {
+        let extractor = Extractor::offline(vec![]);
+        assert!(!extractor.can_fetch());
+        assert!(matches!(
+            extractor.fetch_readable("https://blog.dev/p").await,
+            Err(ExtractError::FetchDisabled)
+        ));
+    }
+
+    #[test]
+    fn readability_pulls_the_main_content_out_of_a_page() {
+        let paragraph = "Readability keeps the body copy and throws away the chrome. ".repeat(20);
+        let html = format!(
+            "<html><head><title>A Post</title></head><body>\
+             <nav><a href=\"/\">home</a></nav>\
+             <article><h1>A Post</h1><p>{paragraph}</p><p>{paragraph}</p></article>\
+             <footer>© 2026</footer></body></html>"
+        );
+        let content = readability(&html, "https://blog.dev/p").expect("main content");
+        assert!(content.contains("Readability keeps the body copy"));
+        let clean = sanitize_with_base(&content, "https://blog.dev/p");
+        assert!(word_count(&clean) > 200);
+        assert!(!clean.contains("<nav"));
+    }
+}
diff --git a/src/http.rs b/src/http.rs
new file mode 100644
index 0000000..033b046
--- /dev/null
+++ b/src/http.rs
@@ -0,0 +1,193 @@
+//! Shared HTTP client and retry policy (implementation notes §4, spec §3 "retry").
+//!
+//! One [`reqwest::Client`] is built at startup and cloned into every stage that
+//! talks to the network (Miniflux, social, extraction, images, world briefing).
+
+use std::time::Duration;
+
+/// Descriptive UA required by Reddit and polite everywhere else (§3.4, notes §4).
+pub const USER_AGENT: &str = "the-daily-epub/1.0 (personal rss digest; contact tyler@hallada.net)";
+
+/// Default per-request timeout (§3.3: 10s).
+pub const DEFAULT_TIMEOUT: Duration = Duration::from_secs(10);
+
+/// Build the process-wide HTTP client: rustls, gzip, no cookie jar (notes §4).
+pub fn build_client(timeout: Duration) -> reqwest::Result<reqwest::Client> {
+    reqwest::Client::builder()
+        .user_agent(USER_AGENT)
+        .timeout(timeout)
+        .connect_timeout(Duration::from_secs(5))
+        .gzip(true)
+        // No cookie jar: the `cookies` feature is deliberately off (notes §4).
+        .build()
+}
+
+/// Jittered exponential backoff, max 3 attempts (crate table "retry").
+#[derive(Debug, Clone, Copy)]
+pub struct RetryPolicy {
+    pub max_attempts: u32,
+    pub base_delay: Duration,
+    pub max_delay: Duration,
+}
+
+impl Default for RetryPolicy {
+    fn default() -> Self {
+        Self {
+            max_attempts: 3,
+            base_delay: Duration::from_millis(500),
+            max_delay: Duration::from_secs(10),
+        }
+    }
+}
+
+impl RetryPolicy {
+    /// Delay before attempt `attempt` (1-based), with ±25% jitter.
+    pub fn delay_for(&self, attempt: u32) -> Duration {
+        let exp = self
+            .base_delay
+            .saturating_mul(2u32.saturating_pow(attempt.saturating_sub(1)));
+        let capped = exp.min(self.max_delay);
+        let jitter = rand::random_range(0.75f64..1.25f64);
+        Duration::from_secs_f64(capped.as_secs_f64() * jitter).min(self.max_delay)
+    }
+
+    /// Run `op` until it succeeds or returns a non-retryable error.
+    ///
+    /// `op` is retried while it yields an error for which `retryable` is true —
+    /// network failures and 5xx responses (§3.1).
+    pub async fn run<T, E, F, Fut>(
+        &self,
+        what: &str,
+        retryable: impl Fn(&E) -> bool,
+        mut op: F,
+    ) -> Result<T, E>
+    where
+        F: FnMut() -> Fut,
+        Fut: Future<Output = Result<T, E>>,
+        E: std::fmt::Display,
+    {
+        let mut attempt = 1;
+        loop {
+            match op().await {
+                Ok(v) => return Ok(v),
+                Err(e) if attempt < self.max_attempts && retryable(&e) => {
+                    let delay = self.delay_for(attempt);
+                    tracing::warn!(
+                        attempt,
+                        max = self.max_attempts,
+                        delay_ms = delay.as_millis() as u64,
+                        "{what} failed, retrying: {e}"
+                    );
+                    tokio::time::sleep(delay).await;
+                    attempt += 1;
+                }
+                Err(e) => return Err(e),
+            }
+        }
+    }
+}
+
+/// True for network-level failures and 5xx/429 responses (§3.1, §3.4).
+pub fn is_retryable(err: &reqwest::Error) -> bool {
+    if err.is_timeout() || err.is_connect() || err.is_request() {
+        return true;
+    }
+    match err.status() {
+        Some(s) => s.is_server_error() || s == reqwest::StatusCode::TOO_MANY_REQUESTS,
+        None => true,
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn client_builds() {
+        build_client(DEFAULT_TIMEOUT).unwrap();
+    }
+
+    #[test]
+    fn backoff_grows_and_is_capped() {
+        let p = RetryPolicy::default();
+        for attempt in 1..=3 {
+            let d = p.delay_for(attempt);
+            assert!(d <= p.max_delay);
+            assert!(d >= Duration::from_millis(300));
+        }
+        // Second attempt doubles the base delay before jitter (1000ms ± 25%).
+        assert!(p.delay_for(2) >= Duration::from_millis(750));
+        // Overflow-safe and still capped for absurd attempt numbers.
+        let huge = p.delay_for(30);
+        assert!(huge <= p.max_delay && huge >= Duration::from_secs(7));
+    }
+
+    #[tokio::test]
+    async fn retries_until_success_then_stops() {
+        let policy = RetryPolicy {
+            max_attempts: 3,
+            base_delay: Duration::from_millis(1),
+            max_delay: Duration::from_millis(2),
+        };
+        let mut calls = 0;
+        let out: Result<u8, String> = policy
+            .run(
+                "test",
+                |_| true,
+                || {
+                    calls += 1;
+                    let n = calls;
+                    async move {
+                        if n < 3 {
+                            Err("boom".to_string())
+                        } else {
+                            Ok(7u8)
+                        }
+                    }
+                },
+            )
+            .await;
+        assert_eq!(out, Ok(7));
+        assert_eq!(calls, 3);
+    }
+
+    #[tokio::test]
+    async fn gives_up_after_max_attempts() {
+        let policy = RetryPolicy {
+            max_attempts: 3,
+            base_delay: Duration::from_millis(1),
+            max_delay: Duration::from_millis(2),
+        };
+        let mut calls = 0;
+        let out: Result<u8, String> = policy
+            .run(
+                "test",
+                |_| true,
+                || {
+                    calls += 1;
+                    async { Err("boom".to_string()) }
+                },
+            )
+            .await;
+        assert!(out.is_err());
+        assert_eq!(calls, 3);
+    }
+
+    #[tokio::test]
+    async fn non_retryable_errors_fail_fast() {
+        let policy = RetryPolicy::default();
+        let mut calls = 0;
+        let out: Result<u8, String> = policy
+            .run(
+                "test",
+                |_| false,
+                || {
+                    calls += 1;
+                    async { Err("nope".to_string()) }
+                },
+            )
+            .await;
+        assert!(out.is_err());
+        assert_eq!(calls, 1);
+    }
+}
diff --git a/src/lib.rs b/src/lib.rs
new file mode 100644
index 0000000..63f15f7
--- /dev/null
+++ b/src/lib.rs
@@ -0,0 +1,34 @@
+//! `daily-epub` — a personalized daily newspaper as an EPUB (spec §1, §2).
+//!
+//! The crate ships both a library and a thin `daily-epub` binary. Everything the
+//! pipeline does lives here so that integration tests can drive the stages
+//! directly (see `tests/e2e_pipeline.rs`) instead of shelling out to the binary.
+//!
+//! Pipeline order (spec §2), all of it wired in [`crate::pipeline`]:
+//!
+//! ```text
+//! Miniflux ingest → dedupe → extraction → persist → social enrichment
+//!   → pre-filter → LLM scoring → selection → comments → world briefing
+//!   → editorial → EPUB build (standard + X4) → XTC → publish → report
+//! ```
+
+pub mod auth;
+pub mod comments;
+pub mod config;
+pub mod curate;
+pub mod db;
+pub mod dedupe;
+pub mod epub;
+pub mod extract;
+pub mod http;
+pub mod miniflux;
+pub mod pipeline;
+pub mod publish;
+pub mod report;
+pub mod server;
+pub mod social;
+pub mod types;
+pub mod world;
+
+/// `CARGO_PKG_VERSION`, printed in the colophon and the OPDS generator tag.
+pub const VERSION: &str = env!("CARGO_PKG_VERSION");
diff --git a/src/main.rs b/src/main.rs
new file mode 100644
index 0000000..2d8d39b
--- /dev/null
+++ b/src/main.rs
@@ -0,0 +1,331 @@
+//! `daily-epub` — CLI entry point (spec §2).
+//!
+//! Everything of substance lives in the library (`src/lib.rs`); this binary only
+//! parses flags, loads config, opens the database and dispatches.
+
+use std::path::PathBuf;
+
+use anyhow::{Context, Result};
+use clap::{Parser, Subcommand};
+use tracing_subscriber::EnvFilter;
+
+use daily_epub::config::Config;
+use daily_epub::db::Db;
+use daily_epub::pipeline::{self, GenerateOptions, GenerateOutcome};
+use daily_epub::report::RunReport;
+use daily_epub::{curate, http, server, social};
+
+/// A personalized daily newspaper, delivered as an EPUB.
+#[derive(Debug, Parser)]
+#[command(name = "daily-epub", version, about, long_about = None)]
+struct Cli {
+    /// Config file path (defaults to ./config.toml when present).
+    #[arg(long, short, global = true, value_name = "FILE")]
+    config: Option<PathBuf>,
+
+    #[command(subcommand)]
+    command: Command,
+}
+
+#[derive(Debug, Subcommand)]
+enum Command {
+    /// Build (and publish) one issue.
+    Generate(GenerateArgs),
+    /// Run the rating endpoints, XTC OPDS feed and static files.
+    Serve,
+    /// Taste-profile maintenance.
+    #[command(subcommand)]
+    Profile(ProfileCommand),
+    /// Re-poll social scores for recent entries.
+    BackfillSocial(BackfillSocialArgs),
+    /// Database maintenance.
+    #[command(subcommand)]
+    Db(DbCommand),
+}
+
+#[derive(Debug, clap::Args)]
+struct GenerateArgs {
+    /// Issue date in the configured timezone (defaults to today).
+    #[arg(long, value_name = "YYYY-MM-DD")]
+    date: Option<String>,
+    /// Build everything but publish nothing: no BookOrbit copy, no issue record.
+    #[arg(long)]
+    dry_run: bool,
+    /// Write artifacts here instead of `out_dir`.
+    #[arg(long, value_name = "DIR")]
+    out: Option<PathBuf>,
+    /// Cap the lineup size (overrides `target_article_count`).
+    #[arg(long, value_name = "N")]
+    max_articles: Option<usize>,
+    /// Skip every LLM call: prefilter order selects, excerpts stand in for summaries.
+    #[arg(long)]
+    skip_llm: bool,
+}
+
+impl From<&GenerateArgs> for GenerateOptions {
+    fn from(args: &GenerateArgs) -> Self {
+        Self {
+            date: args.date.clone(),
+            dry_run: args.dry_run,
+            out: args.out.clone(),
+            max_articles: args.max_articles,
+            skip_llm: args.skip_llm,
+        }
+    }
+}
+
+#[derive(Debug, Subcommand)]
+enum ProfileCommand {
+    /// Regenerate the taste profile from ratings history.
+    Rebuild,
+}
+
+#[derive(Debug, clap::Args)]
+struct BackfillSocialArgs {
+    /// How many days back to re-poll.
+    #[arg(long, default_value_t = 7)]
+    days: u32,
+}
+
+#[derive(Debug, Subcommand)]
+enum DbCommand {
+    /// Run pending sqlx migrations.
+    Migrate,
+}
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    init_tracing();
+    let cli = Cli::parse();
+    let config = Config::load(cli.config.as_deref()).context("loading configuration")?;
+    tracing::debug!(?config.database_path, "configuration loaded");
+
+    match cli.command {
+        Command::Generate(args) => {
+            let db = Db::open_and_migrate(&config.database_path).await?;
+            let outcome = pipeline::generate(&config, &db, &GenerateOptions::from(&args)).await?;
+            print_outcome(&outcome);
+        }
+        Command::Serve => {
+            let db = Db::open_and_migrate(&config.database_path).await?;
+            server::serve(config, db).await?;
+        }
+        Command::Profile(ProfileCommand::Rebuild) => {
+            let db = Db::open_and_migrate(&config.database_path).await?;
+            cmd_profile_rebuild(&config, &db).await?;
+        }
+        Command::BackfillSocial(args) => {
+            let db = Db::open_and_migrate(&config.database_path).await?;
+            cmd_backfill_social(&db, args.days).await?;
+        }
+        Command::Db(DbCommand::Migrate) => {
+            let db = Db::open(&config.database_path).await?;
+            db.migrate().await?;
+            println!("migrations up to date: {}", config.database_path.display());
+        }
+    }
+    Ok(())
+}
+
+/// `RUST_LOG`-driven tracing, defaulting to `info` (crate table "logging").
+fn init_tracing() {
+    let filter = EnvFilter::try_from_default_env()
+        .unwrap_or_else(|_| EnvFilter::new("info,sqlx=warn,hyper=warn,reqwest=warn"));
+    tracing_subscriber::fmt()
+        .with_env_filter(filter)
+        .with_target(false)
+        .with_writer(std::io::stderr)
+        .init();
+}
+
+// ---------------------------------------------------------------------------
+// Output
+// ---------------------------------------------------------------------------
+
+/// Human-readable end-of-run output; the machine-readable form lives in `runs`
+/// and in the issue's `report_json` (§3.13).
+fn print_outcome(outcome: &GenerateOutcome) {
+    print_report(&outcome.report);
+    if let Some(issue) = &outcome.issue {
+        print_lineup(issue);
+    }
+    for artifact in &outcome.artifacts {
+        println!(
+            "built:  {} ({:.1} MiB)",
+            artifact.path.display(),
+            artifact.bytes as f64 / (1024.0 * 1024.0)
+        );
+    }
+    if let Some(xtc) = &outcome.xtc {
+        println!("xtc:    {}", xtc.display());
+    }
+    match &outcome.published {
+        Some(published) => {
+            for artifact in &published.epubs {
+                println!("published: {}", artifact.path.display());
+            }
+            if let Some(xtc) = &published.xtc {
+                println!("published: {}", xtc.display());
+            }
+            if let Some(opds) = &published.opds {
+                println!("opds:      {}", opds.display());
+            }
+            if published.pruned > 0 {
+                println!("pruned:    {} expired files", published.pruned);
+            }
+        }
+        None => println!("dry run: nothing was published"),
+    }
+}
+
+fn print_report(report: &RunReport) {
+    println!("{}", report.summary_line());
+    if let (Some(start), Some(end)) = (report.window_start, report.window_end) {
+        println!("window: {start} → {end}");
+    }
+    println!(
+        "entries: {} from {} feeds → {} articles ({} merged, {} dropped)",
+        report.counts.entries_fetched,
+        report.counts.feeds_seen,
+        report.counts.articles,
+        report.counts.duplicates_merged,
+        report.counts.entries_dropped,
+    );
+    println!(
+        "tokens: {} input · {} cached · {} output = ${:.4}",
+        report.usage.input_tokens,
+        report.usage.cached_tokens,
+        report.usage.output_tokens,
+        report.cost_usd,
+    );
+    for warning in &report.warnings {
+        println!("warning: {warning}");
+    }
+    if let Some(err) = &report.error {
+        println!("error: {err}");
+    }
+    tracing::debug!("{}", report.to_json());
+}
+
+/// The day's lineup, section by section — the `--dry-run` deliverable (§4 M3).
+fn print_lineup(issue: &daily_epub::types::Issue) {
+    println!(
+        "\nThe Daily EPUB No. {} — {} · {}",
+        issue.meta.issue_number,
+        issue.meta.display_date,
+        issue.meta.stats_line()
+    );
+    for section in &issue.lineup.section_order {
+        println!("\n  {section}");
+        for pick in issue.lineup.section_picks(section) {
+            let lead = if pick.is_lead { "★ " } else { "  " };
+            println!(
+                "  {lead}{} — {} ({} min)",
+                pick.article.title,
+                pick.article.feed_title,
+                pick.article.reading_minutes()
+            );
+        }
+    }
+    if issue.world_briefing.is_some() {
+        println!("\n  {}", daily_epub::types::WORLD_BRIEFING_SECTION);
+    }
+    println!();
+}
+
+// ---------------------------------------------------------------------------
+// Other subcommands
+// ---------------------------------------------------------------------------
+
+async fn cmd_profile_rebuild(config: &Config, db: &Db) -> Result<()> {
+    let meter = curate::llm::UsageMeter::new(&config.deepseek, config.max_daily_usd);
+    let profile = curate::profile::load_or_build(db, &config.interests_opml).await?;
+    let llm = curate::llm::LlmClient::new(&config.deepseek, profile.text, meter)?;
+    let rebuilt = curate::profile::rebuild(db, &llm, &config.interests_opml).await?;
+    let feeds = curate::profile::rebuild_feed_priors(db).await?;
+    println!(
+        "taste profile rebuilt (version {}, {} chars); {feeds} feed priors refreshed",
+        rebuilt.version,
+        rebuilt.text.len()
+    );
+    Ok(())
+}
+
+async fn cmd_backfill_social(db: &Db, days: u32) -> Result<()> {
+    let http = http::build_client(http::DEFAULT_TIMEOUT)?;
+    let enricher = social::SocialEnricher::new(http, db.clone());
+    let updated = enricher.backfill(days).await?;
+    println!("refreshed social scores for {updated} articles");
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use clap::CommandFactory;
+
+    #[test]
+    fn cli_definition_is_valid() {
+        Cli::command().debug_assert();
+    }
+
+    #[test]
+    fn parses_every_subcommand_from_the_spec() {
+        let cli = Cli::try_parse_from([
+            "daily-epub",
+            "generate",
+            "--date",
+            "2026-08-15",
+            "--dry-run",
+            "--out",
+            "./out",
+            "--max-articles",
+            "6",
+            "--skip-llm",
+        ])
+        .unwrap();
+        match cli.command {
+            Command::Generate(a) => {
+                assert_eq!(a.date.as_deref(), Some("2026-08-15"));
+                assert!(a.dry_run);
+                assert_eq!(a.out, Some(PathBuf::from("./out")));
+                assert_eq!(a.max_articles, Some(6));
+                assert!(a.skip_llm);
+
+                let opts = GenerateOptions::from(&a);
+                assert_eq!(opts.date.as_deref(), Some("2026-08-15"));
+                assert!(opts.dry_run && opts.skip_llm);
+                assert_eq!(opts.max_articles, Some(6));
+            }
+            other => panic!("expected generate, got {other:?}"),
+        }
+
+        assert!(matches!(
+            Cli::try_parse_from(["daily-epub", "serve"])
+                .unwrap()
+                .command,
+            Command::Serve
+        ));
+        assert!(matches!(
+            Cli::try_parse_from(["daily-epub", "profile", "rebuild"])
+                .unwrap()
+                .command,
+            Command::Profile(ProfileCommand::Rebuild)
+        ));
+        assert!(matches!(
+            Cli::try_parse_from(["daily-epub", "backfill-social", "--days", "14"])
+                .unwrap()
+                .command,
+            Command::BackfillSocial(BackfillSocialArgs { days: 14 })
+        ));
+        assert!(matches!(
+            Cli::try_parse_from(["daily-epub", "db", "migrate"])
+                .unwrap()
+                .command,
+            Command::Db(DbCommand::Migrate)
+        ));
+
+        let cli = Cli::try_parse_from(["daily-epub", "--config", "/tmp/x.toml", "serve"]).unwrap();
+        assert_eq!(cli.config, Some(PathBuf::from("/tmp/x.toml")));
+    }
+}
diff --git a/src/miniflux.rs b/src/miniflux.rs
new file mode 100644
index 0000000..3c3b908
--- /dev/null
+++ b/src/miniflux.rs
@@ -0,0 +1,504 @@
+//! Miniflux API client (spec §3.1).
+//!
+//! Reads only: entries are fetched with `published_after` inside the lookback
+//! window **regardless of read/unread status**, and read state is never mutated
+//! so normal reader usage is undisturbed.
+
+use std::collections::HashMap;
+
+use jiff::Timestamp;
+use serde::{Deserialize, Serialize};
+
+use crate::config::MinifluxConfig;
+use crate::http::{RetryPolicy, is_retryable};
+use crate::types::{Entry, FeedId};
+
+/// Miniflux caps `limit` at 250 (§3.1).
+pub const MAX_PAGE_LIMIT: u32 = 250;
+/// Safety valve so a misconfigured window cannot page forever.
+const MAX_PAGES: u32 = 200;
+
+#[derive(Debug, thiserror::Error)]
+pub enum MinifluxError {
+    #[error("miniflux api key is not configured (set DAILY_EPUB_MINIFLUX__API_KEY)")]
+    MissingApiKey,
+    #[error("miniflux request failed: {0}")]
+    Http(#[from] reqwest::Error),
+    #[error("miniflux returned {status} for {path}: {body}")]
+    Status {
+        status: u16,
+        path: String,
+        body: String,
+    },
+    #[error("could not parse miniflux response for {path}: {source}")]
+    Decode {
+        path: String,
+        #[source]
+        source: serde_json::Error,
+    },
+}
+
+type Result<T> = std::result::Result<T, MinifluxError>;
+
+// ---------------------------------------------------------------------------
+// Wire types (only the fields §3.1 lists as used)
+// ---------------------------------------------------------------------------
+
+/// A category as embedded in a feed object.
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct MinifluxCategory {
+    #[serde(default)]
+    pub id: i64,
+    #[serde(default)]
+    pub title: String,
+}
+
+/// `GET /v1/feeds` element — used to build the `feed_id → metadata` map (§3.1).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct MinifluxFeed {
+    pub id: FeedId,
+    #[serde(default)]
+    pub title: String,
+    #[serde(default)]
+    pub site_url: String,
+    #[serde(default)]
+    pub feed_url: String,
+    #[serde(default)]
+    pub category: Option<MinifluxCategory>,
+}
+
+/// `GET /v1/entries` element.
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct MinifluxEntry {
+    pub id: i64,
+    pub feed_id: FeedId,
+    #[serde(default)]
+    pub title: String,
+    #[serde(default)]
+    pub url: String,
+    #[serde(default)]
+    pub comments_url: String,
+    #[serde(default)]
+    pub author: String,
+    /// RFC3339 with offset, e.g. `2026-08-15T04:00:00-04:00`.
+    #[serde(default)]
+    pub published_at: String,
+    /// Miniflux's stored content: full text when "fetch original content" is on.
+    #[serde(default)]
+    pub content: String,
+    #[serde(default)]
+    pub status: String,
+    #[serde(default)]
+    pub starred: bool,
+    #[serde(default)]
+    pub reading_time: i64,
+    /// Present when Miniflux inlines the feed object on the entry.
+    #[serde(default)]
+    pub feed: Option<MinifluxFeed>,
+}
+
+/// Envelope returned by `GET /v1/entries`.
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct EntriesResponse {
+    #[serde(default)]
+    pub total: i64,
+    #[serde(default)]
+    pub entries: Vec<MinifluxEntry>,
+}
+
+/// Feed metadata joined onto every entry we persist (§3.1).
+#[derive(Debug, Clone, PartialEq)]
+pub struct FeedMeta {
+    pub id: FeedId,
+    pub title: String,
+    pub site_url: String,
+    /// The subscribed feed URL — the only reliable "came via Scour" tell (§3.2).
+    pub feed_url: String,
+    pub category: Option<String>,
+}
+
+impl From<&MinifluxFeed> for FeedMeta {
+    fn from(f: &MinifluxFeed) -> Self {
+        Self {
+            id: f.id,
+            title: f.title.clone(),
+            site_url: f.site_url.clone(),
+            feed_url: f.feed_url.clone(),
+            category: f.category.as_ref().map(|c| c.title.clone()),
+        }
+    }
+}
+
+/// `feed_id → "{feed_url} {site_url}"`, the haystack
+/// [`crate::dedupe::classify_source_with_feed`] matches against (§3.2).
+pub fn feed_urls(feeds: &HashMap<FeedId, FeedMeta>) -> crate::dedupe::FeedUrls {
+    feeds
+        .iter()
+        .map(|(id, meta)| {
+            (
+                *id,
+                format!("{} {}", meta.feed_url, meta.site_url)
+                    .trim()
+                    .to_string(),
+            )
+        })
+        .collect()
+}
+
+impl MinifluxEntry {
+    /// Parse `published_at`, tolerating the empty/zero values Miniflux can emit.
+    pub fn published_timestamp(&self) -> Option<Timestamp> {
+        if self.published_at.is_empty() {
+            return None;
+        }
+        self.published_at.parse::<Timestamp>().ok()
+    }
+
+    fn opt(s: &str) -> Option<String> {
+        let s = s.trim();
+        if s.is_empty() {
+            None
+        } else {
+            Some(s.to_string())
+        }
+    }
+
+    /// Convert to the persisted [`Entry`] shape (§3.13).
+    ///
+    /// `canonical_url` is left `None`: the dedupe stage (§3.2) fills it in.
+    pub fn into_entry(self, feeds: &HashMap<FeedId, FeedMeta>, fetched_at: Timestamp) -> Entry {
+        let meta = feeds.get(&self.feed_id);
+        let inline = self.feed.as_ref();
+        let feed_title = meta
+            .map(|m| m.title.clone())
+            .or_else(|| inline.map(|f| f.title.clone()))
+            .filter(|t| !t.is_empty());
+        let category = meta
+            .and_then(|m| m.category.clone())
+            .or_else(|| {
+                inline
+                    .and_then(|f| f.category.as_ref())
+                    .map(|c| c.title.clone())
+            })
+            .filter(|c| !c.is_empty());
+        Entry {
+            id: self.id,
+            feed_id: self.feed_id,
+            feed_title,
+            category,
+            published_at: self.published_timestamp(),
+            title: self.title.trim().to_string(),
+            url: self.url.trim().to_string(),
+            canonical_url: None,
+            author: Self::opt(&self.author),
+            comments_url: Self::opt(&self.comments_url),
+            raw_content: self.content,
+            fetched_at,
+        }
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Client
+// ---------------------------------------------------------------------------
+
+/// Read-only Miniflux client (§3.1).
+#[derive(Debug, Clone)]
+pub struct MinifluxClient {
+    http: reqwest::Client,
+    base_url: String,
+    api_key: String,
+    page_limit: u32,
+    retry: RetryPolicy,
+}
+
+impl MinifluxClient {
+    /// Build a client from `[miniflux]` config; fails if the API key is absent.
+    pub fn new(cfg: &MinifluxConfig, http: reqwest::Client) -> Result<Self> {
+        let api_key = cfg
+            .api_key
+            .clone()
+            .filter(|k| !k.trim().is_empty())
+            .ok_or(MinifluxError::MissingApiKey)?;
+        Ok(Self {
+            http,
+            base_url: cfg.base_url.trim_end_matches('/').to_string(),
+            api_key,
+            page_limit: cfg.page_limit.clamp(1, MAX_PAGE_LIMIT),
+            retry: RetryPolicy::default(),
+        })
+    }
+
+    pub fn with_retry_policy(mut self, retry: RetryPolicy) -> Self {
+        self.retry = retry;
+        self
+    }
+
+    fn url(&self, path: &str) -> String {
+        format!("{}/v1{}", self.base_url, path)
+    }
+
+    /// GET `path` with the auth header, retrying network/5xx failures (§3.1).
+    async fn get_json<T: serde::de::DeserializeOwned>(
+        &self,
+        path: &str,
+        query: &[(&str, String)],
+    ) -> Result<T> {
+        let url = self.url(path);
+        let body = self
+            .retry
+            .run(
+                &format!("GET {path}"),
+                |e: &MinifluxError| match e {
+                    MinifluxError::Http(e) => is_retryable(e),
+                    MinifluxError::Status { status, .. } => *status >= 500 || *status == 429,
+                    _ => false,
+                },
+                || async {
+                    let resp = self
+                        .http
+                        .get(&url)
+                        .header("X-Auth-Token", &self.api_key)
+                        .header("Accept", "application/json")
+                        .query(query)
+                        .send()
+                        .await?;
+                    let status = resp.status();
+                    let text = resp.text().await?;
+                    if !status.is_success() {
+                        return Err(MinifluxError::Status {
+                            status: status.as_u16(),
+                            path: path.to_string(),
+                            body: text.chars().take(300).collect(),
+                        });
+                    }
+                    Ok(text)
+                },
+            )
+            .await?;
+        serde_json::from_str(&body).map_err(|source| MinifluxError::Decode {
+            path: path.to_string(),
+            source,
+        })
+    }
+
+    /// `GET /v1/feeds` — once per run (§3.1).
+    pub async fn feeds(&self) -> Result<Vec<MinifluxFeed>> {
+        self.get_json("/feeds", &[]).await
+    }
+
+    /// `feed_id → {title, site_url, category.title}` (§3.1).
+    pub async fn feed_map(&self) -> Result<HashMap<FeedId, FeedMeta>> {
+        Ok(self
+            .feeds()
+            .await?
+            .iter()
+            .map(|f| (f.id, FeedMeta::from(f)))
+            .collect())
+    }
+
+    /// One page of `GET /v1/entries`, ordered by `published_at` desc (§3.1).
+    pub async fn entries_page(
+        &self,
+        published_after: Timestamp,
+        offset: u32,
+    ) -> Result<EntriesResponse> {
+        self.get_json(
+            "/entries",
+            &[
+                ("order", "published_at".to_string()),
+                ("direction", "desc".to_string()),
+                ("published_after", published_after.as_second().to_string()),
+                ("limit", self.page_limit.to_string()),
+                ("offset", offset.to_string()),
+            ],
+        )
+        .await
+    }
+
+    /// Page through every entry published after `published_after`, read or not (§3.1).
+    pub async fn entries_since(&self, published_after: Timestamp) -> Result<Vec<MinifluxEntry>> {
+        let mut all: Vec<MinifluxEntry> = Vec::new();
+        let mut offset = 0u32;
+        for page in 0..MAX_PAGES {
+            let resp = self.entries_page(published_after, offset).await?;
+            let got = resp.entries.len();
+            tracing::debug!(
+                page,
+                offset,
+                got,
+                total = resp.total,
+                "miniflux entries page"
+            );
+            all.extend(resp.entries);
+            if got < self.page_limit as usize || all.len() as i64 >= resp.total {
+                break;
+            }
+            offset += self.page_limit;
+        }
+        Ok(all)
+    }
+
+    /// Full ingest: fetch the feed map, page the window, and map to [`Entry`] rows.
+    ///
+    /// Entries published after `until` (the run's "now") are dropped so a
+    /// re-run for a past date does not pull in newer stories.
+    pub async fn ingest_window(
+        &self,
+        since: Timestamp,
+        until: Timestamp,
+        fetched_at: Timestamp,
+    ) -> Result<(Vec<Entry>, HashMap<FeedId, FeedMeta>)> {
+        let feeds = self.feed_map().await?;
+        tracing::info!(feeds = feeds.len(), "loaded miniflux feed metadata");
+        let raw = self.entries_since(since).await?;
+        tracing::info!(entries = raw.len(), "fetched miniflux entries");
+        let entries = raw
+            .into_iter()
+            .filter(|e| match e.published_timestamp() {
+                Some(ts) => ts <= until,
+                // Keep entries with unparseable dates; dedupe will judge them.
+                None => true,
+            })
+            .map(|e| e.into_entry(&feeds, fetched_at))
+            .collect();
+        Ok((entries, feeds))
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    const ENTRIES_JSON: &str = r#"{
+      "total": 2,
+      "entries": [
+        {
+          "id": 30011,
+          "user_id": 1,
+          "feed_id": 42,
+          "status": "unread",
+          "hash": "abc",
+          "title": "  Writing a Kernel in Rust  ",
+          "url": "https://example.com/kernel-rust",
+          "comments_url": "https://news.ycombinator.com/item?id=44551122",
+          "published_at": "2026-08-15T04:12:00-04:00",
+          "created_at": "2026-08-15T08:13:00Z",
+          "author": "Jane Dev",
+          "content": "<p>A long post.</p>",
+          "starred": false,
+          "reading_time": 14,
+          "enclosures": null,
+          "feed": {
+            "id": 42,
+            "title": "Inline Feed Title",
+            "site_url": "https://example.com",
+            "feed_url": "https://example.com/feed.xml",
+            "category": {"id": 3, "title": "Inline Category"}
+          }
+        },
+        {
+          "id": 30012,
+          "feed_id": 99,
+          "status": "read",
+          "title": "No feed object here",
+          "url": "https://other.example/post",
+          "comments_url": "",
+          "published_at": "",
+          "author": "",
+          "content": "",
+          "starred": true,
+          "reading_time": 0
+        }
+      ]
+    }"#;
+
+    const FEEDS_JSON: &str = r#"[
+      {"id": 42, "title": "Lobsters", "site_url": "https://lobste.rs",
+       "feed_url": "https://lobste.rs/rss", "category": {"id": 1, "title": "Tech"}},
+      {"id": 99, "title": "Scour: Rust", "site_url": "https://scour.ing",
+       "feed_url": "https://scour.ing/feed", "category": null}
+    ]"#;
+
+    fn ts(s: &str) -> Timestamp {
+        s.parse().unwrap()
+    }
+
+    #[test]
+    fn deserializes_entries_response() {
+        let resp: EntriesResponse = serde_json::from_str(ENTRIES_JSON).unwrap();
+        assert_eq!(resp.total, 2);
+        assert_eq!(resp.entries.len(), 2);
+        let first = &resp.entries[0];
+        assert_eq!(first.id, 30011);
+        assert_eq!(first.feed_id, 42);
+        assert_eq!(
+            first.comments_url,
+            "https://news.ycombinator.com/item?id=44551122"
+        );
+        assert_eq!(
+            first.published_timestamp(),
+            Some(ts("2026-08-15T08:12:00Z"))
+        );
+        assert_eq!(first.feed.as_ref().unwrap().title, "Inline Feed Title");
+        assert!(resp.entries[1].published_timestamp().is_none());
+    }
+
+    #[test]
+    fn deserializes_feeds_and_builds_map() {
+        let feeds: Vec<MinifluxFeed> = serde_json::from_str(FEEDS_JSON).unwrap();
+        let map: HashMap<FeedId, FeedMeta> =
+            feeds.iter().map(|f| (f.id, FeedMeta::from(f))).collect();
+        assert_eq!(map[&42].title, "Lobsters");
+        assert_eq!(map[&42].category.as_deref(), Some("Tech"));
+        assert_eq!(map[&99].category, None);
+    }
+
+    #[test]
+    fn maps_entries_onto_feed_metadata() {
+        let feeds: Vec<MinifluxFeed> = serde_json::from_str(FEEDS_JSON).unwrap();
+        let map: HashMap<FeedId, FeedMeta> =
+            feeds.iter().map(|f| (f.id, FeedMeta::from(f))).collect();
+        let resp: EntriesResponse = serde_json::from_str(ENTRIES_JSON).unwrap();
+        let fetched = ts("2026-08-15T09:30:00Z");
+        let entries: Vec<Entry> = resp
+            .entries
+            .into_iter()
+            .map(|e| e.into_entry(&map, fetched))
+            .collect();
+
+        // /v1/feeds metadata wins over the inline feed object.
+        assert_eq!(entries[0].feed_title.as_deref(), Some("Lobsters"));
+        assert_eq!(entries[0].category.as_deref(), Some("Tech"));
+        assert_eq!(entries[0].title, "Writing a Kernel in Rust");
+        assert_eq!(entries[0].author.as_deref(), Some("Jane Dev"));
+        assert!(entries[0].comments_url.is_some());
+        assert_eq!(entries[0].canonical_url, None);
+        assert_eq!(entries[0].fetched_at, fetched);
+
+        // Empty strings become None, not "".
+        assert_eq!(entries[1].author, None);
+        assert_eq!(entries[1].comments_url, None);
+        assert_eq!(entries[1].feed_title.as_deref(), Some("Scour: Rust"));
+        assert_eq!(entries[1].category, None);
+    }
+
+    #[test]
+    fn requires_an_api_key() {
+        let http = crate::http::build_client(crate::http::DEFAULT_TIMEOUT).unwrap();
+        let mut cfg = MinifluxConfig::default();
+        assert!(matches!(
+            MinifluxClient::new(&cfg, http.clone()),
+            Err(MinifluxError::MissingApiKey)
+        ));
+        cfg.api_key = Some("   ".into());
+        assert!(MinifluxClient::new(&cfg, http.clone()).is_err());
+        cfg.api_key = Some("token".into());
+        cfg.base_url = "http://127.0.0.1:8082/".into();
+        cfg.page_limit = 5000;
+        let c = MinifluxClient::new(&cfg, http).unwrap();
+        assert_eq!(c.base_url, "http://127.0.0.1:8082");
+        assert_eq!(c.page_limit, MAX_PAGE_LIMIT);
+        assert_eq!(c.url("/entries"), "http://127.0.0.1:8082/v1/entries");
+    }
+}
diff --git a/src/pipeline.rs b/src/pipeline.rs
new file mode 100644
index 0000000..9c53fd9
--- /dev/null
+++ b/src/pipeline.rs
@@ -0,0 +1,707 @@
+//! The `generate` pipeline, wired end to end (spec §2, §3.6 wiring).
+//!
+//! ```text
+//! Miniflux ingest ─▶ dedupe ─▶ extraction ─▶ persist ─▶ social enrichment
+//!   ─▶ pre-filter ─▶ LLM scoring ─▶ selection ─▶ comments ─▶ world briefing
+//!   ─▶ editorial ─▶ EPUB (standard + X4) ─▶ XTC ─▶ publish ─▶ report
+//! ```
+//!
+//! Failure policy (notes §3):
+//!
+//! * **Fatal** — Miniflux ingest, SQLite writes, EPUB assembly, publishing. Without
+//!   any one of them there is no issue, so the run fails loudly and the `runs` row
+//!   records why.
+//! * **Best effort** — social enrichment, comments, the world briefing, images and
+//!   the XTC conversion. They log, add a warning to the report (status `degraded`)
+//!   and the run continues.
+//! * **Degrading** — every DeepSeek stage. A missing key, a dead API or a tripped
+//!   `max_daily_usd` guardrail turns the run into the `--skip-llm` shape
+//!   (prefilter order selects, feed excerpts stand in for summaries) rather than
+//!   losing the day's issue.
+//!
+//! The run is idempotent per date (notes §12): entries, articles, scores and the
+//! issue itself are upserted, `issue_articles` is replaced wholesale, and the
+//! published filenames are derived from the date.
+
+use std::collections::{BTreeMap, BTreeSet};
+use std::path::PathBuf;
+
+use anyhow::{Context, Result};
+use jiff::civil::Date;
+use jiff::{Timestamp, Zoned};
+
+use crate::config::Config;
+use crate::curate::llm::{LlmClient, UsageMeter};
+use crate::curate::{Curator, editorial, profile};
+use crate::db::Db;
+use crate::extract::Extractor;
+use crate::miniflux::MinifluxClient;
+use crate::publish::Published;
+use crate::report::{RunReport, RunStatus};
+use crate::types::{
+    Article, Artifact, Colophon, Edition, Issue, IssueMeta, Lineup, reading_minutes,
+};
+use crate::{comments, dedupe, epub, http, miniflux, publish, social, world};
+
+/// One `generate` invocation's inputs — the CLI flags, already parsed (§2).
+#[derive(Debug, Clone, Default)]
+pub struct GenerateOptions {
+    /// `--date YYYY-MM-DD`; `None` means today in the configured timezone.
+    pub date: Option<String>,
+    /// `--dry-run`: build everything, publish nothing, record no issue.
+    pub dry_run: bool,
+    /// `--out DIR`, overriding `out_dir`.
+    pub out: Option<PathBuf>,
+    /// `--max-articles N`, overriding `target_article_count`.
+    pub max_articles: Option<usize>,
+    /// `--skip-llm`: no DeepSeek call at all.
+    pub skip_llm: bool,
+}
+
+/// What one run produced, for the caller to print (§3.13).
+#[derive(Debug)]
+pub struct GenerateOutcome {
+    pub report: RunReport,
+    /// `None` only when the run failed before assembly.
+    pub issue: Option<Issue>,
+    /// The EPUBs as written into the output directory.
+    pub artifacts: Vec<Artifact>,
+    /// The converted XTC artifact, when the converter ran (§3.11).
+    pub xtc: Option<PathBuf>,
+    /// `None` under `--dry-run`.
+    pub published: Option<Published>,
+}
+
+/// Resolve `--date` (or today) in the configured timezone (notes §2).
+pub fn resolve_date(config: &Config, raw: Option<&str>) -> Result<Date> {
+    let tz = config.tz()?;
+    match raw {
+        Some(s) => s
+            .parse::<Date>()
+            .with_context(|| format!("invalid --date {s:?}, expected YYYY-MM-DD")),
+        None => Ok(Zoned::now().with_time_zone(tz).date()),
+    }
+}
+
+/// The ingest window `[end - lookback_hours, end]` where `end` is the end of the
+/// issue's day in the configured timezone, clamped to now (§3.1).
+pub fn ingest_window(config: &Config, date: Date) -> Result<(Timestamp, Timestamp)> {
+    let tz = config.tz()?;
+    let now = Timestamp::now();
+    let end_of_day = date
+        .to_zoned(tz)
+        .context("resolving issue date in the configured timezone")?
+        .tomorrow()
+        .context("computing the end of the issue day")?
+        .timestamp();
+    let end = end_of_day.min(now);
+    let start = end - jiff::Span::new().hours(i64::from(config.lookback_hours));
+    Ok((start, end))
+}
+
+/// "Friday, August 15, 2026" — the cover/front-page dateline (§3.10).
+pub fn display_date(date: Date) -> String {
+    const WEEKDAYS: [&str; 7] = [
+        "Monday",
+        "Tuesday",
+        "Wednesday",
+        "Thursday",
+        "Friday",
+        "Saturday",
+        "Sunday",
+    ];
+    const MONTHS: [&str; 12] = [
+        "January",
+        "February",
+        "March",
+        "April",
+        "May",
+        "June",
+        "July",
+        "August",
+        "September",
+        "October",
+        "November",
+        "December",
+    ];
+    let weekday = WEEKDAYS[(date.weekday().to_monday_zero_offset() as usize).min(6)];
+    let month = MONTHS[(date.month() as usize).clamp(1, 12) - 1];
+    format!("{weekday}, {month} {}, {}", date.day(), date.year())
+}
+
+/// Materialize the [`Issue`] the EPUB builder consumes (§3.10).
+///
+/// Pure: every count is derived from the lineup, so the same inputs always give
+/// the same cover and stats line (notes §12).
+pub fn build_issue(
+    date: Date,
+    issue_number: i64,
+    generated_at: Timestamp,
+    lineup: Lineup,
+    editorial: crate::types::Editorial,
+    world_briefing: Option<crate::types::WorldBriefing>,
+    colophon: Colophon,
+) -> Issue {
+    let total_words = lineup.total_words();
+    let section_count = lineup.section_order.len() as i64
+        + i64::from(world_briefing.is_some() && !lineup.section_order.is_empty());
+    let meta = IssueMeta {
+        date,
+        issue_number,
+        generated_at,
+        display_date: display_date(date),
+        article_count: lineup.picks.len() as i64,
+        section_count,
+        total_words,
+        reading_minutes: reading_minutes(total_words),
+    };
+    Issue {
+        meta,
+        lineup,
+        editorial,
+        world_briefing,
+        colophon,
+    }
+}
+
+/// Copy stage-C summaries onto their picks so `issue_articles` and the EPUB agree.
+pub fn apply_summaries(lineup: &mut Lineup, editorial: &crate::types::Editorial) {
+    for pick in &mut lineup.picks {
+        if pick.summary.is_none()
+            && let Some(summary) = editorial.summaries.get(&pick.article.id)
+        {
+            pick.summary = Some(summary.clone());
+        }
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Driver
+// ---------------------------------------------------------------------------
+
+/// Run one issue end to end, recording a `runs` row either way (§2, §3.13).
+pub async fn generate(config: &Config, db: &Db, opts: &GenerateOptions) -> Result<GenerateOutcome> {
+    let date = resolve_date(config, opts.date.as_deref())?;
+    let started_at = Timestamp::now();
+    let (window_start, window_end) = ingest_window(config, date)?;
+    let out_dir = opts.out.clone().unwrap_or_else(|| config.out_dir.clone());
+    let target = opts.max_articles.unwrap_or(config.target_article_count);
+
+    let span = tracing::info_span!("generate", %date, dry_run = opts.dry_run);
+    let _guard = span.enter();
+    tracing::info!(
+        %window_start,
+        %window_end,
+        lookback_hours = config.lookback_hours,
+        target,
+        skip_llm = opts.skip_llm,
+        out = %out_dir.display(),
+        "starting run"
+    );
+
+    let run_id = db.start_run(date, started_at).await?;
+    let mut report = RunReport::new(date, started_at);
+    report.window_start = Some(window_start);
+    report.window_end = Some(window_end);
+    if opts.dry_run {
+        report.status = RunStatus::DryRun;
+    }
+
+    let ctx = StageContext {
+        config,
+        db,
+        date,
+        target,
+        out_dir,
+        dry_run: opts.dry_run,
+        skip_llm: opts.skip_llm,
+    };
+    let stages = match run_stages(&ctx, window_start, window_end, &mut report).await {
+        Ok(stages) => {
+            report.finish(
+                Timestamp::now(),
+                config.deepseek.price_input_per_mtok,
+                config.deepseek.price_cached_input_per_mtok,
+                config.deepseek.price_output_per_mtok,
+            );
+            stages
+        }
+        Err(e) => {
+            report.fail(Timestamp::now(), format!("{e:#}"));
+            db.finish_run(run_id, &report).await?;
+            return Err(e);
+        }
+    };
+
+    db.finish_run(run_id, &report).await?;
+    // The issue row is written before the report is costed, so stamp the finished
+    // report onto it now (the paths are preserved by `COALESCE`, §3.13).
+    if !opts.dry_run
+        && let Some(issue) = stages.issue.as_ref()
+        && let Err(e) = db
+            .upsert_issue(
+                date,
+                issue.meta.issue_number,
+                issue.meta.generated_at,
+                None,
+                None,
+                None,
+                None,
+                Some(&report.to_json()),
+            )
+            .await
+    {
+        tracing::warn!(error = %e, "could not attach the run report to the issue");
+    }
+    Ok(GenerateOutcome {
+        report,
+        issue: stages.issue,
+        artifacts: stages.artifacts,
+        xtc: stages.xtc,
+        published: stages.published,
+    })
+}
+
+/// What [`run_stages`] hands back; [`generate`] pairs it with the costed report.
+#[derive(Debug)]
+struct StageOutput {
+    issue: Option<Issue>,
+    artifacts: Vec<Artifact>,
+    xtc: Option<PathBuf>,
+    published: Option<Published>,
+}
+
+/// Everything the stages need that does not change between them.
+struct StageContext<'a> {
+    config: &'a Config,
+    db: &'a Db,
+    date: Date,
+    target: usize,
+    out_dir: PathBuf,
+    dry_run: bool,
+    skip_llm: bool,
+}
+
+async fn run_stages(
+    ctx: &StageContext<'_>,
+    window_start: Timestamp,
+    window_end: Timestamp,
+    report: &mut RunReport,
+) -> Result<StageOutput> {
+    let (config, db, date) = (ctx.config, ctx.db, ctx.date);
+    let http = http::build_client(http::DEFAULT_TIMEOUT).context("building http client")?;
+
+    // --- Stage 1: Miniflux ingest (§3.1) — fatal on failure ---
+    let stage = Timestamp::now();
+    let client = MinifluxClient::new(&config.miniflux, http.clone())
+        .context("constructing the miniflux client")?;
+    let (entries, feeds) = client
+        .ingest_window(window_start, window_end, Timestamp::now())
+        .await
+        .context("ingesting entries from miniflux")?;
+
+    report.counts.entries_fetched = entries.len() as i64;
+    report.counts.feeds_seen = entries
+        .iter()
+        .map(|e| e.feed_id)
+        .collect::<BTreeSet<_>>()
+        .len() as i64;
+    let mut per_feed: BTreeMap<String, i64> = BTreeMap::new();
+    for entry in &entries {
+        let name = entry
+            .feed_title
+            .clone()
+            .or_else(|| feeds.get(&entry.feed_id).map(|f| f.title.clone()))
+            .unwrap_or_else(|| format!("feed {}", entry.feed_id));
+        *per_feed.entry(name).or_insert(0) += 1;
+    }
+    report.per_feed_counts = per_feed;
+
+    // Entries are persisted even on a dry run: `articles.best_entry_id` is a real
+    // foreign key, and the social cache keys off the article ids. Only the
+    // watermark (an ingest bookmark) is left alone.
+    let written = db
+        .upsert_entries(&entries)
+        .await
+        .context("persisting entries")?;
+    if ctx.dry_run {
+        tracing::info!(written, "dry run: persisted entries, watermark left alone");
+    } else {
+        db.set_watermark(window_end).await?;
+        tracing::info!(written, "persisted entries and advanced the watermark");
+    }
+    report.timings.record("ingest", elapsed_ms(stage));
+
+    // --- Stage 2: normalize + dedupe (§3.2) ---
+    let stage = Timestamp::now();
+    let feed_urls = miniflux::feed_urls(&feeds);
+    let (mut articles, dedupe_stats) = dedupe::cluster_with_feeds(entries, &feed_urls);
+    report.counts.entries_dropped = dedupe_stats.dropped_non_article as i64;
+    report.counts.articles = dedupe_stats.clusters as i64;
+    report.counts.duplicates_merged = dedupe_stats.merged as i64;
+    report.timings.record("dedupe", elapsed_ms(stage));
+
+    // --- Stage 3: content extraction (§3.3) — before persisting, because it
+    // replaces the raw Miniflux body that `dedupe` left on the cluster ---
+    let stage = Timestamp::now();
+    let extractor = Extractor::new(http.clone(), config.curation.paywall_domains.clone());
+    let extract_stats = extractor.extract_all(&mut articles).await;
+    report.counts.extracted = (extract_stats.from_miniflux + extract_stats.from_readability) as i64;
+    report.counts.excerpt_only = extract_stats.excerpt_only as i64;
+    if extract_stats.fetch_failures > 0 {
+        report.warn(format!(
+            "{} articles fell back to a feed excerpt",
+            extract_stats.fetch_failures
+        ));
+    }
+    report.timings.record("extract", elapsed_ms(stage));
+
+    // --- Stage 4: persist the clusters, minting real article ids (§3.13) ---
+    let stage = Timestamp::now();
+    persist_articles(db, &mut articles).await?;
+    report.timings.record("persist", elapsed_ms(stage));
+
+    // --- Stage 5: social enrichment (§3.4) — best effort, needs real ids ---
+    let stage = Timestamp::now();
+    let enricher = social::SocialEnricher::new(http.clone(), db.clone());
+    report.counts.social_hits = enricher.enrich_all(&mut articles).await as i64;
+    report.timings.record("social", elapsed_ms(stage));
+
+    // --- Stage 6: feed priors, then the heuristic pre-filter (§3.5, §3.9) ---
+    let stage = Timestamp::now();
+    if let Err(e) = profile::rebuild_feed_priors(db).await {
+        report.warn(format!("could not rebuild feed priors: {e:#}"));
+    }
+
+    let meter = UsageMeter::new(&config.deepseek, config.max_daily_usd);
+    // `max_daily_usd` is a ceiling for the *day*, not for one invocation, so a
+    // re-run inherits what earlier runs for this date already spent (§3.6).
+    match db.spend_for_date(date).await {
+        Ok(spent) if spent > 0.0 => {
+            tracing::info!(spent, "preloading today's recorded DeepSeek spend");
+            meter.preload_cost(spent);
+        }
+        Ok(_) => {}
+        Err(e) => tracing::warn!(error = %e, "could not read today's spend; starting from zero"),
+    }
+
+    let llm = build_llm(ctx, &meter, report).await;
+    let llm_available = llm.is_some();
+    let mut curator_config = config.clone();
+    curator_config.target_article_count = ctx.target;
+    let curator = Curator::new(curator_config, db.clone(), llm);
+
+    let mut candidates = curator
+        .prefilter(articles, date)
+        .await
+        .context("running the heuristic pre-filter")?;
+    report.counts.candidates = candidates.len() as i64;
+    report.timings.record("prefilter", elapsed_ms(stage));
+
+    // --- Stage 7: LLM scoring, then selection (§3.6 A + B) ---
+    let stage = Timestamp::now();
+    if llm_available && let Err(e) = curator.score(&mut candidates, date).await {
+        // A dead API or a tripped budget must not cost us the issue: selection
+        // degrades to prefilter order exactly as `--skip-llm` does.
+        report.warn(format!("LLM scoring failed; ranking heuristically: {e:#}"));
+    }
+    report.counts.llm_scored = candidates.iter().filter(|c| c.llm.is_some()).count() as i64;
+
+    let mut lineup = curator
+        .select(candidates, date)
+        .await
+        .context("selecting the lineup")?;
+    report.counts.selected = lineup.picks.len() as i64;
+    if lineup.picks.is_empty() {
+        report.warn("the lineup is empty — check the lookback window and pre-filter");
+    }
+    report.timings.record("curate", elapsed_ms(stage));
+
+    // --- Stage 8: comment chapters for the selected articles (§3.7) ---
+    let stage = Timestamp::now();
+    report.counts.discussions = comments::fetch_all(&http, &mut lineup.picks).await as i64;
+    report.timings.record("comments", elapsed_ms(stage));
+
+    // --- Stage 9: world briefing (§3.8) — non-fatal by construction ---
+    let stage = Timestamp::now();
+    let world_briefing = world::fetch_optional(&http, date, config.world_briefing).await;
+    if config.world_briefing && world_briefing.is_none() {
+        report.warn("the world briefing was unavailable; the section is omitted");
+    }
+    report.timings.record("world", elapsed_ms(stage));
+
+    // --- Stage 10: editorial (§3.6 C) ---
+    let stage = Timestamp::now();
+    let editorial = match curator.editorial(&lineup).await {
+        Ok(editorial) => editorial,
+        Err(e) => {
+            report.warn(format!(
+                "editorial generation failed; using excerpts: {e:#}"
+            ));
+            editorial::fallback_editorial(&lineup)
+        }
+    };
+    apply_summaries(&mut lineup, &editorial);
+    report.timings.record("editorial", elapsed_ms(stage));
+
+    // --- Stage 11: assemble the issue (§3.10) ---
+    let issue_number = db
+        .next_issue_number(date)
+        .await
+        .context("computing the issue number")?;
+    let colophon = Colophon {
+        model: if llm_available {
+            config.deepseek.model.clone()
+        } else {
+            "none (--skip-llm)".into()
+        },
+        entries_fetched: report.counts.entries_fetched,
+        feeds_seen: report.counts.feeds_seen,
+        candidates: report.counts.candidates,
+        cost_usd: meter.cost_usd(),
+        generator_version: format!("daily-epub {}", crate::VERSION),
+    };
+    report.usage = meter.total();
+    let issue = build_issue(
+        date,
+        issue_number,
+        Timestamp::now(),
+        lineup,
+        editorial,
+        world_briefing,
+        colophon,
+    );
+
+    // --- Stage 12: build both EPUB editions (§3.10) — fatal on failure ---
+    let stage = Timestamp::now();
+    let (artifacts, images) = epub::build_all(&issue, config, &ctx.out_dir)
+        .await
+        .context("building the EPUB editions")?;
+    report.counts.images_embedded = images as i64;
+    report.timings.record("epub", elapsed_ms(stage));
+
+    // --- Stage 13: XTC conversion (§3.11) — best effort ---
+    let stage = Timestamp::now();
+    let x4 = artifacts.iter().find(|a| a.edition == Edition::X4);
+    let xtc = match x4 {
+        Some(artifact) if config.xtc.enabled => {
+            match epub::x4::convert(&config.xtc, &artifact.path, &ctx.out_dir).await {
+                Ok(path) => Some(path),
+                Err(e) => {
+                    // Carry the converter's own message into the report: "did not
+                    // produce a file" alone cannot distinguish a missing Node from
+                    // a missing settings file from a genuine conversion failure.
+                    tracing::warn!("xtc conversion skipped: {e}");
+                    report.warn(format!("the XTC conversion did not produce a file: {e}"));
+                    None
+                }
+            }
+        }
+        _ => None,
+    };
+    report.timings.record("xtc", elapsed_ms(stage));
+
+    // --- Stage 14: publish + record the issue (§3.11) ---
+    let stage = Timestamp::now();
+    let published = if ctx.dry_run {
+        tracing::info!(
+            out = %ctx.out_dir.display(),
+            "dry run: skipping BookOrbit/XTC publishing and the issue record"
+        );
+        None
+    } else {
+        let published = publish::publish_issue(db, config, &issue, &artifacts, xtc.as_deref())
+            .await
+            .context("publishing the issue")?;
+        record_issue(db, &issue, &published)
+            .await
+            .context("recording the issue")?;
+        Some(published)
+    };
+    report.timings.record("publish", elapsed_ms(stage));
+
+    Ok(StageOutput {
+        issue: Some(issue),
+        artifacts,
+        xtc,
+        published,
+    })
+}
+
+/// Insert/refresh the `articles` rows and stamp the returned ids back on (§3.13).
+async fn persist_articles(db: &Db, articles: &mut [Article]) -> Result<()> {
+    for article in articles.iter_mut() {
+        let id = db
+            .upsert_article(article)
+            .await
+            .with_context(|| format!("persisting article {}", article.canonical_url))?;
+        article.id = id;
+        for social_ref in &mut article.social {
+            social_ref.article_id = id;
+        }
+    }
+    tracing::info!(articles = articles.len(), "persisted article clusters");
+    Ok(())
+}
+
+/// Write the `issues` row and replace `issue_articles` for the date (notes §12).
+async fn record_issue(db: &Db, issue: &Issue, published: &Published) -> Result<()> {
+    let path_for = |edition: Edition| {
+        published
+            .epubs
+            .iter()
+            .find(|a| a.edition == edition)
+            .map(|a| a.path.display().to_string())
+    };
+    let epub_path = path_for(Edition::Standard);
+    let x4_path = path_for(Edition::X4);
+    let xtc_path = published.xtc.as_ref().map(|p| p.display().to_string());
+
+    db.upsert_issue(
+        issue.meta.date,
+        issue.meta.issue_number,
+        issue.meta.generated_at,
+        epub_path.as_deref(),
+        x4_path.as_deref(),
+        xtc_path.as_deref(),
+        Some(&issue.editorial.front_page_html),
+        None,
+    )
+    .await?;
+    db.replace_issue_articles(issue.meta.date, &issue.lineup.picks)
+        .await?;
+    Ok(())
+}
+
+/// Build the DeepSeek client, running the weekly profile rebuild when it is due.
+///
+/// Returns `None` for `--skip-llm` and for every configuration/API problem: the
+/// caller then curates heuristically instead of failing the run (§3.6).
+async fn build_llm(
+    ctx: &StageContext<'_>,
+    meter: &UsageMeter,
+    report: &mut RunReport,
+) -> Option<LlmClient> {
+    if ctx.skip_llm {
+        tracing::info!("--skip-llm: no DeepSeek call will be made");
+        return None;
+    }
+    let profile = match profile::load_or_build(ctx.db, &ctx.config.interests_opml).await {
+        Ok(profile) => profile,
+        Err(e) => {
+            report.warn(format!(
+                "could not build the taste profile; curating heuristically: {e:#}"
+            ));
+            return None;
+        }
+    };
+    let client = match LlmClient::new(&ctx.config.deepseek, profile.text, meter.clone()) {
+        Ok(client) => client,
+        Err(e) => {
+            report.warn(format!(
+                "DeepSeek is unavailable; curating heuristically: {e}"
+            ));
+            return None;
+        }
+    };
+
+    // Weekly rewrite of the "learned adjustments" section (§3.6c). It changes the
+    // system prompt, so the client is rebuilt around the new profile.
+    match profile::weekly_rebuild_if_due(ctx.db, &client, &ctx.config.interests_opml).await {
+        Ok(Some(rebuilt)) => {
+            tracing::info!(version = rebuilt.version, "taste profile rebuilt");
+            match LlmClient::new(&ctx.config.deepseek, rebuilt.text, meter.clone()) {
+                Ok(refreshed) => Some(refreshed),
+                Err(e) => {
+                    tracing::warn!(error = %e, "keeping the previous profile client");
+                    Some(client)
+                }
+            }
+        }
+        Ok(None) => Some(client),
+        Err(e) => {
+            report.warn(format!("weekly profile rebuild failed: {e:#}"));
+            Some(client)
+        }
+    }
+}
+
+fn elapsed_ms(since: Timestamp) -> i64 {
+    (Timestamp::now().as_millisecond() - since.as_millisecond()).max(0)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn display_date_matches_the_masthead_format() {
+        let date: Date = "2026-08-15".parse().unwrap();
+        assert_eq!(display_date(date), "Saturday, August 15, 2026");
+        let date: Date = "2026-01-01".parse().unwrap();
+        assert_eq!(display_date(date), "Thursday, January 1, 2026");
+        let date: Date = "2026-12-31".parse().unwrap();
+        assert_eq!(display_date(date), "Thursday, December 31, 2026");
+    }
+
+    #[test]
+    fn ingest_window_spans_the_lookback() {
+        let config = Config::default();
+        let date: Date = "2020-01-15".parse().unwrap();
+        let (start, end) = ingest_window(&config, date).unwrap();
+        assert!(start < end);
+        let hours = (end.as_second() - start.as_second()) / 3600;
+        assert_eq!(hours, i64::from(config.lookback_hours));
+        // 2020-01-16T00:00 America/New_York == 2020-01-16T05:00Z
+        assert_eq!(end.to_string(), "2020-01-16T05:00:00Z");
+    }
+
+    #[test]
+    fn resolve_date_parses_and_defaults() {
+        let config = Config::default();
+        assert_eq!(
+            resolve_date(&config, Some("2026-08-15"))
+                .unwrap()
+                .to_string(),
+            "2026-08-15"
+        );
+        assert!(resolve_date(&config, Some("nope")).is_err());
+        assert!(resolve_date(&config, None).is_ok());
+    }
+
+    #[test]
+    fn issue_meta_is_derived_from_the_lineup() {
+        let lineup = crate::epub::build::fixtures::issue().lineup;
+        let words = lineup.total_words();
+        let sections = lineup.section_order.len() as i64;
+        let issue = build_issue(
+            "2026-08-15".parse().unwrap(),
+            7,
+            "2026-08-15T09:30:00Z".parse().unwrap(),
+            lineup,
+            crate::types::Editorial::default(),
+            None,
+            Colophon::default(),
+        );
+        assert_eq!(issue.meta.issue_number, 7);
+        assert_eq!(issue.meta.display_date, "Saturday, August 15, 2026");
+        assert_eq!(issue.meta.article_count, issue.lineup.picks.len() as i64);
+        assert_eq!(issue.meta.section_count, sections);
+        assert_eq!(issue.meta.total_words, words);
+        assert_eq!(issue.meta.reading_minutes, reading_minutes(words));
+    }
+
+    #[test]
+    fn summaries_land_on_their_picks() {
+        let mut lineup = crate::epub::build::fixtures::issue().lineup;
+        for pick in &mut lineup.picks {
+            pick.summary = None;
+        }
+        let mut editorial = crate::types::Editorial::default();
+        let first = lineup.picks[0].article.id;
+        editorial.summaries.insert(first, "An abstract.".into());
+        apply_summaries(&mut lineup, &editorial);
+        assert_eq!(lineup.picks[0].summary.as_deref(), Some("An abstract."));
+        assert!(lineup.picks[1..].iter().all(|p| p.summary.is_none()));
+    }
+}
diff --git a/src/publish.rs b/src/publish.rs
new file mode 100644
index 0000000..e9d3052
--- /dev/null
+++ b/src/publish.rs
@@ -0,0 +1,875 @@
+//! Publishing: BookOrbit watched folder, XTC delivery, OPDS feed, retention
+//! (spec §3.11).
+//!
+//! Everything here is deliberately dumb about *how* artifacts were produced: the
+//! EPUB/XTC stages hand over finished files, this module only copies, indexes and
+//! prunes them. Copies are atomic (temp file in the destination directory, then
+//! `rename`) so BookOrbit's watcher and CrossPoint's OPDS client never observe a
+//! half-written book.
+//!
+//! [`crate::pipeline`] ends a non-dry run with one call —
+//! `publish_issue(db, config, &issue, &artifacts, xtc_path.as_deref())`, where
+//! `artifacts` are the `epub::build_all` outputs and `xtc_path` is
+//! `epub::x4::convert`'s output (`None` when the converter is disabled or
+//! failed) — and feeds the returned [`Published`] paths into
+//! `db.upsert_issue(..., epub_path, x4_path, xtc_path, ...)`.
+
+use std::collections::BTreeMap;
+use std::path::{Path, PathBuf};
+
+use jiff::civil::Date;
+use jiff::{Timestamp, Zoned};
+use sqlx::Row;
+use tokio::io::AsyncWriteExt;
+
+use crate::config::Config;
+use crate::db::Db;
+use crate::types::{Artifact, Edition, Issue};
+
+/// Filename of the generated static OPDS feed (§3.11).
+pub const XTC_OPDS_FILENAME: &str = "xtc.xml";
+/// Number of issues listed in the XTC OPDS feed (§3.11).
+pub const XTC_FEED_ENTRIES: usize = 14;
+/// Every published file starts with this (the retention sweep keys off it).
+pub const FILE_PREFIX: &str = "The Daily EPUB - ";
+/// Extensions the retention sweep is allowed to delete (§3.11).
+pub const PRUNABLE_EXTENSIONS: [&str; 3] = ["epub", "xtc", "xtch"];
+
+#[derive(Debug, thiserror::Error)]
+pub enum PublishError {
+    #[error("io error at {path}: {source}")]
+    Io {
+        path: PathBuf,
+        #[source]
+        source: std::io::Error,
+    },
+    #[error("publish directory does not exist: {0}")]
+    MissingDir(PathBuf),
+}
+
+impl PublishError {
+    fn at(path: impl Into<PathBuf>) -> impl FnOnce(std::io::Error) -> PublishError {
+        let path = path.into();
+        move |source| PublishError::Io { path, source }
+    }
+}
+
+/// Everything one `generate` run published (§3.11).
+#[derive(Debug, Clone, Default, PartialEq)]
+pub struct Published {
+    /// The EPUB artifacts, rewritten to point at their published locations.
+    pub epubs: Vec<Artifact>,
+    /// The XTC artifact's published location, when the converter produced one.
+    pub xtc: Option<PathBuf>,
+    /// The regenerated OPDS feed.
+    pub opds: Option<PathBuf>,
+    /// How many expired files the retention sweep removed.
+    pub pruned: usize,
+}
+
+/// Canonical published filename: `The Daily EPUB - 2026-08-15 (X4).epub` (§3.11).
+pub fn issue_filename(date: Date, edition: Edition, extension: &str) -> String {
+    format!("{FILE_PREFIX}{date}{}.{extension}", edition.file_suffix())
+}
+
+/// Parse the issue date back out of a published filename, `None` when the name
+/// is not one of ours (the retention sweep must never touch foreign files).
+pub fn date_from_filename(name: &str) -> Option<Date> {
+    let rest = name.strip_prefix(FILE_PREFIX)?;
+    let extension = Path::new(name).extension()?.to_str()?.to_ascii_lowercase();
+    if !PRUNABLE_EXTENSIONS.contains(&extension.as_str()) {
+        return None;
+    }
+    rest.get(..10)?.parse::<Date>().ok()
+}
+
+// ---------------------------------------------------------------------------
+// Copying
+// ---------------------------------------------------------------------------
+
+/// Atomic copy: write to a temp file in the destination dir, then rename (§3.11).
+///
+/// The temp file is created beside the destination so the rename stays within one
+/// filesystem; a failed copy leaves the previous version of `dest` intact.
+pub async fn atomic_copy(src: &Path, dest: &Path) -> Result<(), PublishError> {
+    let dir = dest.parent().unwrap_or_else(|| Path::new("."));
+    ensure_dir(dir).await?;
+    let tmp = dir.join(format!(
+        ".{}.{}.{}.tmp",
+        dest.file_name()
+            .and_then(|n| n.to_str())
+            .unwrap_or("daily-epub"),
+        std::process::id(),
+        Timestamp::now().as_nanosecond()
+    ));
+
+    let bytes = tokio::fs::read(src).await.map_err(PublishError::at(src))?;
+    let write = async {
+        let mut file = tokio::fs::File::create(&tmp).await?;
+        file.write_all(&bytes).await?;
+        file.sync_all().await?;
+        Ok::<(), std::io::Error>(())
+    };
+    if let Err(source) = write.await {
+        let _ = tokio::fs::remove_file(&tmp).await;
+        return Err(PublishError::Io { path: tmp, source });
+    }
+    if let Err(source) = tokio::fs::rename(&tmp, dest).await {
+        let _ = tokio::fs::remove_file(&tmp).await;
+        return Err(PublishError::Io {
+            path: dest.to_path_buf(),
+            source,
+        });
+    }
+    tracing::debug!(
+        src = %src.display(),
+        dest = %dest.display(),
+        bytes = bytes.len(),
+        "published atomically"
+    );
+    Ok(())
+}
+
+async fn ensure_dir(dir: &Path) -> Result<(), PublishError> {
+    tokio::fs::create_dir_all(dir)
+        .await
+        .map_err(PublishError::at(dir))
+}
+
+/// Copy both EPUB editions into the BookOrbit watched folder (§3.11).
+///
+/// Returns the published paths in the same order as `artifacts`.
+pub async fn publish_epubs(
+    artifacts: &[Artifact],
+    issue: &Issue,
+    cfg: &Config,
+) -> Result<Vec<PathBuf>, PublishError> {
+    let dir = &cfg.publish.bookorbit_dir;
+    ensure_dir(dir).await?;
+    let mut published = Vec::with_capacity(artifacts.len());
+    for artifact in artifacts {
+        let extension = artifact
+            .path
+            .extension()
+            .and_then(|e| e.to_str())
+            .unwrap_or("epub");
+        let dest = dir.join(issue_filename(issue.meta.date, artifact.edition, extension));
+        atomic_copy(&artifact.path, &dest).await?;
+        tracing::info!(
+            edition = ?artifact.edition,
+            dest = %dest.display(),
+            bytes = artifact.bytes,
+            "published edition to the BookOrbit library"
+        );
+        published.push(dest);
+    }
+    Ok(published)
+}
+
+/// Copy the `.xtc`/`.xtch` artifact into `publish.xtc_dir` (§3.11).
+pub async fn publish_xtc(xtc: &Path, cfg: &Config) -> Result<PathBuf, PublishError> {
+    let dir = &cfg.publish.xtc_dir;
+    ensure_dir(dir).await?;
+    let name = xtc
+        .file_name()
+        .and_then(|n| n.to_str())
+        .unwrap_or("daily-epub.xtch");
+    let dest = dir.join(name);
+    atomic_copy(xtc, &dest).await?;
+    tracing::info!(dest = %dest.display(), "published XTC artifact");
+    Ok(dest)
+}
+
+/// Publish everything one run produced, refresh the OPDS feed and prune (§3.11).
+///
+/// `xtc` is `None` when the converter is disabled or failed — that is not an
+/// error, the X4 falls back to the EPUB edition from BookOrbit.
+pub async fn publish_issue(
+    db: &Db,
+    cfg: &Config,
+    issue: &Issue,
+    artifacts: &[Artifact],
+    xtc: Option<&Path>,
+) -> Result<Published, PublishError> {
+    let span = tracing::info_span!("publish", date = %issue.meta.date);
+    let _guard = span.enter();
+
+    let paths = publish_epubs(artifacts, issue, cfg).await?;
+    let epubs = artifacts
+        .iter()
+        .zip(paths)
+        .map(|(artifact, path)| Artifact {
+            path,
+            ..artifact.clone()
+        })
+        .collect();
+
+    let xtc = match xtc {
+        Some(src) => Some(publish_xtc(src, cfg).await?),
+        None => None,
+    };
+    let opds = Some(write_xtc_opds(db, cfg).await?);
+    let pruned = prune(cfg, issue.meta.date).await?;
+
+    Ok(Published {
+        epubs,
+        xtc,
+        opds,
+        pruned,
+    })
+}
+
+// ---------------------------------------------------------------------------
+// OPDS 1.2 acquisition feed (§3.11)
+// ---------------------------------------------------------------------------
+
+/// One published XTC file, as listed in the feed.
+#[derive(Debug, Clone, PartialEq, Eq)]
+struct XtcFile {
+    name: String,
+    date: Option<Date>,
+    modified: Timestamp,
+    bytes: u64,
+}
+
+/// Regenerate the static OPDS 1.2 acquisition feed for the XTC directory:
+/// newest first, last [`XTC_FEED_ENTRIES`], entries typed
+/// `application/octet-stream` (§3.11).
+pub async fn write_xtc_opds(db: &Db, cfg: &Config) -> Result<PathBuf, PublishError> {
+    let dir = &cfg.publish.xtc_dir;
+    ensure_dir(dir).await?;
+    let files = scan_xtc_dir(dir).await?;
+    let numbers = issue_numbers(db, &files).await;
+    let feed = render_opds(&files, &numbers, &cfg.server.public_url, Timestamp::now());
+
+    let dest = dir.join(XTC_OPDS_FILENAME);
+    write_atomic(&dest, feed.as_bytes()).await?;
+    tracing::info!(entries = files.len(), dest = %dest.display(), "wrote the XTC OPDS feed");
+    Ok(dest)
+}
+
+/// XTC artifacts in `dir`, newest first, capped at [`XTC_FEED_ENTRIES`].
+async fn scan_xtc_dir(dir: &Path) -> Result<Vec<XtcFile>, PublishError> {
+    let mut entries = tokio::fs::read_dir(dir)
+        .await
+        .map_err(PublishError::at(dir))?;
+    let mut files = Vec::new();
+    while let Some(entry) = entries.next_entry().await.map_err(PublishError::at(dir))? {
+        let name = entry.file_name().to_string_lossy().into_owned();
+        let extension = Path::new(&name)
+            .extension()
+            .and_then(|e| e.to_str())
+            .unwrap_or_default()
+            .to_ascii_lowercase();
+        if !matches!(extension.as_str(), "xtc" | "xtch") {
+            continue;
+        }
+        let meta = match entry.metadata().await {
+            Ok(meta) if meta.is_file() => meta,
+            Ok(_) => continue,
+            Err(e) => {
+                tracing::warn!(error = %e, name, "skipping unreadable XTC file");
+                continue;
+            }
+        };
+        let modified = meta
+            .modified()
+            .ok()
+            .and_then(|m| Timestamp::try_from(m).ok())
+            .unwrap_or_else(Timestamp::now);
+        files.push(XtcFile {
+            date: date_from_filename(&name),
+            name,
+            modified,
+            bytes: meta.len(),
+        });
+    }
+    // Newest first: by issue date when the filename carries one, else by mtime.
+    files.sort_by(|a, b| {
+        b.date
+            .cmp(&a.date)
+            .then(b.modified.cmp(&a.modified))
+            .then(a.name.cmp(&b.name))
+    });
+    files.truncate(XTC_FEED_ENTRIES);
+    Ok(files)
+}
+
+/// Issue numbers for the dated files, best-effort (the feed is still valid
+/// without them). Uses the `db` escape hatch — no bespoke helper in `db.rs`.
+async fn issue_numbers(db: &Db, files: &[XtcFile]) -> BTreeMap<Date, i64> {
+    let mut numbers = BTreeMap::new();
+    for date in files.iter().filter_map(|f| f.date) {
+        let row = sqlx::query("SELECT issue_number FROM issues WHERE date = ?")
+            .bind(date.to_string())
+            .fetch_optional(db.pool())
+            .await;
+        match row {
+            Ok(Some(row)) => {
+                numbers.insert(date, row.get::<i64, _>("issue_number"));
+            }
+            Ok(None) => {}
+            Err(e) => tracing::warn!(error = %e, %date, "issue number lookup failed"),
+        }
+    }
+    numbers
+}
+
+/// Render the Atom/OPDS document (§3.11).
+fn render_opds(
+    files: &[XtcFile],
+    numbers: &BTreeMap<Date, i64>,
+    public_url: &str,
+    now: Timestamp,
+) -> String {
+    let base = public_url.trim_end_matches('/');
+    let self_href = format!("{base}/opds/xtc.xml");
+    let updated = files.first().map(|f| f.modified).unwrap_or(now);
+
+    let mut out = String::with_capacity(1024 + files.len() * 512);
+    out.push_str("<?xml version=\"1.0\" encoding=\"utf-8\"?>\n");
+    out.push_str(
+        "<feed xmlns=\"http://www.w3.org/2005/Atom\" \
+xmlns:dc=\"http://purl.org/dc/terms/\" \
+xmlns:opds=\"http://opds-spec.org/2010/catalog\">\n",
+    );
+    out.push_str("  <id>urn:daily-epub:xtc</id>\n");
+    out.push_str("  <title>The Daily EPUB — XTC editions</title>\n");
+    out.push_str(&format!("  <updated>{}</updated>\n", rfc3339(updated)));
+    out.push_str("  <author><name>The Daily EPUB</name></author>\n");
+    out.push_str(&format!(
+        "  <link rel=\"self\" href=\"{}\" type=\"{}\"/>\n",
+        xml_escape(&self_href),
+        crate::server::OPDS_CONTENT_TYPE
+    ));
+    out.push_str(&format!(
+        "  <link rel=\"start\" href=\"{}\" type=\"{}\"/>\n",
+        xml_escape(&self_href),
+        crate::server::OPDS_CONTENT_TYPE
+    ));
+
+    for file in files {
+        let title = match file.date {
+            Some(date) => format!("The Daily EPUB — {date}"),
+            None => file.name.clone(),
+        };
+        let summary = match file.date.and_then(|d| numbers.get(&d)) {
+            Some(n) => format!("Issue #{n} · {}", human_bytes(file.bytes)),
+            None => human_bytes(file.bytes),
+        };
+        let href = format!("{base}/files/xtc/{}", percent_encode(&file.name));
+        out.push_str("  <entry>\n");
+        out.push_str(&format!("    <title>{}</title>\n", xml_escape(&title)));
+        out.push_str(&format!(
+            "    <id>urn:daily-epub:xtc:{}</id>\n",
+            xml_escape(&percent_encode(&file.name))
+        ));
+        out.push_str(&format!(
+            "    <updated>{}</updated>\n",
+            rfc3339(file.modified)
+        ));
+        if let Some(date) = file.date {
+            out.push_str(&format!("    <dc:issued>{date}</dc:issued>\n"));
+        }
+        out.push_str("    <author><name>The Daily EPUB</name></author>\n");
+        out.push_str(&format!(
+            "    <summary>{}</summary>\n",
+            xml_escape(&summary)
+        ));
+        out.push_str(&format!(
+            "    <link rel=\"http://opds-spec.org/acquisition\" href=\"{}\" \
+type=\"application/octet-stream\" length=\"{}\"/>\n",
+            xml_escape(&href),
+            file.bytes
+        ));
+        out.push_str("  </entry>\n");
+    }
+    out.push_str("</feed>\n");
+    out
+}
+
+/// Atom wants `1996-12-19T16:39:57-08:00`; jiff's `Timestamp` prints `…Z`.
+fn rfc3339(ts: Timestamp) -> String {
+    ts.to_string()
+}
+
+fn human_bytes(bytes: u64) -> String {
+    if bytes >= 1_048_576 {
+        format!("{:.1} MB", bytes as f64 / 1_048_576.0)
+    } else {
+        format!("{:.0} KB", (bytes as f64 / 1024.0).ceil())
+    }
+}
+
+fn xml_escape(s: &str) -> String {
+    let mut out = String::with_capacity(s.len());
+    for c in s.chars() {
+        match c {
+            '&' => out.push_str("&amp;"),
+            '<' => out.push_str("&lt;"),
+            '>' => out.push_str("&gt;"),
+            '"' => out.push_str("&quot;"),
+            '\'' => out.push_str("&apos;"),
+            _ => out.push(c),
+        }
+    }
+    out
+}
+
+/// Percent-encode one URL path segment (filenames contain spaces and parens).
+fn percent_encode(s: &str) -> String {
+    let mut out = String::with_capacity(s.len());
+    for byte in s.as_bytes() {
+        match byte {
+            b'A'..=b'Z' | b'a'..=b'z' | b'0'..=b'9' | b'-' | b'.' | b'_' | b'~' => {
+                out.push(*byte as char)
+            }
+            _ => out.push_str(&format!("%{byte:02X}")),
+        }
+    }
+    out
+}
+
+async fn write_atomic(dest: &Path, bytes: &[u8]) -> Result<(), PublishError> {
+    let dir = dest.parent().unwrap_or_else(|| Path::new("."));
+    let tmp = dir.join(format!(
+        ".{}.{}.tmp",
+        dest.file_name()
+            .and_then(|n| n.to_str())
+            .unwrap_or("daily-epub"),
+        std::process::id()
+    ));
+    tokio::fs::write(&tmp, bytes)
+        .await
+        .map_err(PublishError::at(&tmp))?;
+    tokio::fs::rename(&tmp, dest)
+        .await
+        .map_err(PublishError::at(dest))
+}
+
+// ---------------------------------------------------------------------------
+// Retention (§3.11)
+// ---------------------------------------------------------------------------
+
+/// Delete issue files older than `retention_days` from both publish dirs.
+/// SQLite history is kept forever — it's the training data (§3.11).
+///
+/// Only files named `The Daily EPUB - YYYY-MM-DD*.{epub,xtc,xtch}` are ever
+/// considered; anything else in those directories (including `xtc.xml` and other
+/// people's books) is left strictly alone.
+pub async fn prune(cfg: &Config, today: Date) -> Result<usize, PublishError> {
+    let cutoff = today
+        .checked_sub(jiff::Span::new().days(i64::from(cfg.retention_days)))
+        .unwrap_or(today);
+    let mut removed = 0;
+    for dir in [&cfg.publish.bookorbit_dir, &cfg.publish.xtc_dir] {
+        removed += prune_dir(dir, cutoff).await?;
+    }
+    if removed > 0 {
+        tracing::info!(removed, %cutoff, "retention sweep removed expired issues");
+    }
+    Ok(removed)
+}
+
+async fn prune_dir(dir: &Path, cutoff: Date) -> Result<usize, PublishError> {
+    if !dir.exists() {
+        return Ok(0);
+    }
+    let mut entries = tokio::fs::read_dir(dir)
+        .await
+        .map_err(PublishError::at(dir))?;
+    let mut removed = 0;
+    while let Some(entry) = entries.next_entry().await.map_err(PublishError::at(dir))? {
+        let name = entry.file_name().to_string_lossy().into_owned();
+        let Some(date) = date_from_filename(&name) else {
+            continue;
+        };
+        if date >= cutoff {
+            continue;
+        }
+        if !entry.metadata().await.map(|m| m.is_file()).unwrap_or(false) {
+            continue;
+        }
+        let path = entry.path();
+        match tokio::fs::remove_file(&path).await {
+            Ok(()) => {
+                tracing::info!(path = %path.display(), %date, "pruned expired issue file");
+                removed += 1;
+            }
+            Err(e) => tracing::warn!(error = %e, path = %path.display(), "could not prune file"),
+        }
+    }
+    Ok(removed)
+}
+
+/// Today in the configured timezone — the reference point for [`prune`].
+pub fn today_in_tz(cfg: &Config) -> Date {
+    match cfg.tz() {
+        Ok(tz) => Zoned::now().with_time_zone(tz).date(),
+        Err(e) => {
+            tracing::warn!(error = %e, "falling back to UTC for the retention cutoff");
+            Timestamp::now().to_zoned(jiff::tz::TimeZone::UTC).date()
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::collections::BTreeMap;
+
+    fn cfg(dir: &Path) -> Config {
+        let mut cfg = Config::default();
+        cfg.publish.bookorbit_dir = dir.join("bookorbit");
+        cfg.publish.xtc_dir = dir.join("xtc");
+        cfg.server.public_url = "https://daily.hallada.net".into();
+        cfg
+    }
+
+    fn date(s: &str) -> Date {
+        s.parse().unwrap()
+    }
+
+    fn ts(s: &str) -> Timestamp {
+        s.parse().unwrap()
+    }
+
+    #[test]
+    fn filenames_match_the_spec() {
+        assert_eq!(
+            issue_filename(date("2026-08-15"), Edition::Standard, "epub"),
+            "The Daily EPUB - 2026-08-15.epub"
+        );
+        assert_eq!(
+            issue_filename(date("2026-08-15"), Edition::X4, "epub"),
+            "The Daily EPUB - 2026-08-15 (X4).epub"
+        );
+        assert_eq!(
+            issue_filename(date("2026-08-15"), Edition::X4, "xtch"),
+            "The Daily EPUB - 2026-08-15 (X4).xtch"
+        );
+    }
+
+    #[test]
+    fn only_our_filenames_are_recognized() {
+        assert_eq!(
+            date_from_filename("The Daily EPUB - 2026-08-15.epub"),
+            Some(date("2026-08-15"))
+        );
+        assert_eq!(
+            date_from_filename("The Daily EPUB - 2026-08-15 (X4).xtch"),
+            Some(date("2026-08-15"))
+        );
+        for foreign in [
+            "xtc.xml",
+            "Moby Dick.epub",
+            "The Daily EPUB - notadate.epub",
+            "The Daily EPUB - 2026-08-15.txt",
+            "the daily epub - 2026-08-15.epub",
+            "metadata.db",
+        ] {
+            assert_eq!(date_from_filename(foreign), None, "{foreign}");
+        }
+    }
+
+    #[tokio::test]
+    async fn atomic_copy_creates_the_final_name_and_leaves_no_temp_files() {
+        let dir = tempfile::tempdir().unwrap();
+        let src = dir.path().join("build.epub");
+        tokio::fs::write(&src, b"EPUB BYTES").await.unwrap();
+        let dest = dir
+            .path()
+            .join("out")
+            .join("The Daily EPUB - 2026-08-15.epub");
+
+        atomic_copy(&src, &dest).await.unwrap();
+        assert_eq!(tokio::fs::read(&dest).await.unwrap(), b"EPUB BYTES");
+
+        // Overwriting an existing issue works and stays atomic.
+        tokio::fs::write(&src, b"REGENERATED").await.unwrap();
+        atomic_copy(&src, &dest).await.unwrap();
+        assert_eq!(tokio::fs::read(&dest).await.unwrap(), b"REGENERATED");
+
+        let leftovers: Vec<String> = std::fs::read_dir(dir.path().join("out"))
+            .unwrap()
+            .map(|e| e.unwrap().file_name().to_string_lossy().into_owned())
+            .filter(|n| n.ends_with(".tmp"))
+            .collect();
+        assert!(
+            leftovers.is_empty(),
+            "temp files left behind: {leftovers:?}"
+        );
+
+        assert!(
+            atomic_copy(Path::new("/nonexistent/x.epub"), &dest)
+                .await
+                .is_err()
+        );
+    }
+
+    #[tokio::test]
+    async fn publish_epubs_uses_canonical_names() {
+        let dir = tempfile::tempdir().unwrap();
+        let cfg = cfg(dir.path());
+        let std_src = dir.path().join("a.epub");
+        let x4_src = dir.path().join("b.epub");
+        tokio::fs::write(&std_src, b"standard").await.unwrap();
+        tokio::fs::write(&x4_src, b"x4").await.unwrap();
+
+        let artifacts = vec![
+            Artifact {
+                edition: Edition::Standard,
+                path: std_src,
+                bytes: 8,
+            },
+            Artifact {
+                edition: Edition::X4,
+                path: x4_src,
+                bytes: 2,
+            },
+        ];
+        let issue = fake_issue(date("2026-08-15"));
+        let paths = publish_epubs(&artifacts, &issue, &cfg).await.unwrap();
+        assert_eq!(
+            paths,
+            vec![
+                cfg.publish
+                    .bookorbit_dir
+                    .join("The Daily EPUB - 2026-08-15.epub"),
+                cfg.publish
+                    .bookorbit_dir
+                    .join("The Daily EPUB - 2026-08-15 (X4).epub"),
+            ]
+        );
+        assert_eq!(tokio::fs::read(&paths[0]).await.unwrap(), b"standard");
+
+        let xtc_src = dir.path().join("c.xtch");
+        tokio::fs::write(&xtc_src, b"xtch").await.unwrap();
+        let published = publish_xtc(&xtc_src, &cfg).await.unwrap();
+        assert_eq!(published, cfg.publish.xtc_dir.join("c.xtch"));
+    }
+
+    fn fake_issue(date: Date) -> Issue {
+        use crate::types::{Colophon, Editorial, IssueMeta, Lineup};
+        Issue {
+            meta: IssueMeta {
+                date,
+                issue_number: 12,
+                generated_at: ts("2026-08-15T05:30:00Z"),
+                display_date: "Saturday, August 15, 2026".into(),
+                article_count: 3,
+                section_count: 1,
+                total_words: 900,
+                reading_minutes: 5,
+            },
+            lineup: Lineup {
+                date,
+                picks: vec![],
+                section_order: vec![],
+            },
+            editorial: Editorial::default(),
+            world_briefing: None,
+            colophon: Colophon::default(),
+        }
+    }
+
+    #[test]
+    fn opds_feed_is_newest_first_with_acquisition_links() {
+        let files = vec![
+            XtcFile {
+                name: "The Daily EPUB - 2026-08-15 (X4).xtch".into(),
+                date: Some(date("2026-08-15")),
+                modified: ts("2026-08-15T05:40:00Z"),
+                bytes: 2_500_000,
+            },
+            XtcFile {
+                name: "The Daily EPUB - 2026-08-14 (X4).xtch".into(),
+                date: Some(date("2026-08-14")),
+                modified: ts("2026-08-14T05:40:00Z"),
+                bytes: 4096,
+            },
+        ];
+        let mut numbers = BTreeMap::new();
+        numbers.insert(date("2026-08-15"), 12);
+        let feed = render_opds(
+            &files,
+            &numbers,
+            "https://daily.hallada.net/",
+            ts("2026-08-15T06:00:00Z"),
+        );
+
+        assert!(feed.starts_with("<?xml version=\"1.0\" encoding=\"utf-8\"?>"));
+        assert!(feed.contains("<feed xmlns=\"http://www.w3.org/2005/Atom\""));
+        assert!(feed.contains("<id>urn:daily-epub:xtc</id>"));
+        assert!(feed.contains("<updated>2026-08-15T05:40:00Z</updated>"));
+        assert_eq!(feed.matches("<entry>").count(), 2);
+        assert_eq!(feed.matches("</entry>").count(), 2);
+        // Newest first.
+        let i15 = feed.find("The Daily EPUB — 2026-08-15").unwrap();
+        let i14 = feed.find("The Daily EPUB — 2026-08-14").unwrap();
+        assert!(i15 < i14);
+        // Acquisition link, encoded filename, absolute public URL, size.
+        assert!(feed.contains(
+            "<link rel=\"http://opds-spec.org/acquisition\" \
+href=\"https://daily.hallada.net/files/xtc/The%20Daily%20EPUB%20-%202026-08-15%20%28X4%29.xtch\" \
+type=\"application/octet-stream\" length=\"2500000\"/>"
+        ));
+        assert!(feed.contains("Issue #12 · 2.4 MB"));
+        assert!(feed.trim_end().ends_with("</feed>"));
+        assert!(!feed.contains("&<"), "unescaped markup leaked in");
+    }
+
+    #[tokio::test]
+    async fn write_xtc_opds_lists_only_xtc_files_capped_at_fourteen() {
+        let dir = tempfile::tempdir().unwrap();
+        let cfg = cfg(dir.path());
+        std::fs::create_dir_all(&cfg.publish.xtc_dir).unwrap();
+        for day in 1..=20 {
+            let name = format!("The Daily EPUB - 2026-08-{day:02} (X4).xtch");
+            std::fs::write(cfg.publish.xtc_dir.join(name), b"x").unwrap();
+        }
+        // Non-XTC neighbours must be ignored.
+        std::fs::write(cfg.publish.xtc_dir.join("README.txt"), b"x").unwrap();
+        std::fs::write(cfg.publish.xtc_dir.join("cover.epub"), b"x").unwrap();
+
+        let db = Db::open_and_migrate(&dir.path().join("db.sqlite"))
+            .await
+            .unwrap();
+        db.upsert_issue(
+            date("2026-08-20"),
+            20,
+            ts("2026-08-20T05:30:00Z"),
+            None,
+            None,
+            None,
+            None,
+            None,
+        )
+        .await
+        .unwrap();
+
+        let path = write_xtc_opds(&db, &cfg).await.unwrap();
+        assert_eq!(path, cfg.publish.xtc_dir.join(XTC_OPDS_FILENAME));
+        let feed = std::fs::read_to_string(&path).unwrap();
+        assert_eq!(feed.matches("<entry>").count(), XTC_FEED_ENTRIES);
+        assert!(feed.contains("2026-08-20"));
+        assert!(!feed.contains("2026-08-06"), "older than the last 14");
+        assert!(!feed.contains("README"));
+        assert!(!feed.contains("cover.epub"));
+        assert!(feed.contains("Issue #20"));
+
+        // Regenerating replaces the file in place.
+        write_xtc_opds(&db, &cfg).await.unwrap();
+        let leftovers: Vec<String> = std::fs::read_dir(&cfg.publish.xtc_dir)
+            .unwrap()
+            .map(|e| e.unwrap().file_name().to_string_lossy().into_owned())
+            .filter(|n| n.ends_with(".tmp"))
+            .collect();
+        assert!(leftovers.is_empty(), "{leftovers:?}");
+    }
+
+    #[tokio::test]
+    async fn prune_only_deletes_old_matching_files() {
+        let dir = tempfile::tempdir().unwrap();
+        let mut conf = cfg(dir.path());
+        conf.retention_days = 21;
+        std::fs::create_dir_all(&conf.publish.bookorbit_dir).unwrap();
+        std::fs::create_dir_all(&conf.publish.xtc_dir).unwrap();
+
+        let keep_epub = conf
+            .publish
+            .bookorbit_dir
+            .join("The Daily EPUB - 2026-08-14.epub");
+        let old_epub = conf
+            .publish
+            .bookorbit_dir
+            .join("The Daily EPUB - 2026-07-01.epub");
+        let old_x4 = conf
+            .publish
+            .bookorbit_dir
+            .join("The Daily EPUB - 2026-07-01 (X4).epub");
+        let foreign = conf.publish.bookorbit_dir.join("Moby Dick.epub");
+        let old_xtc = conf
+            .publish
+            .xtc_dir
+            .join("The Daily EPUB - 2026-07-01 (X4).xtch");
+        let feed = conf.publish.xtc_dir.join(XTC_OPDS_FILENAME);
+        for path in [&keep_epub, &old_epub, &old_x4, &foreign, &old_xtc, &feed] {
+            std::fs::write(path, b"x").unwrap();
+        }
+
+        let removed = prune(&conf, date("2026-08-15")).await.unwrap();
+        assert_eq!(removed, 3);
+        assert!(keep_epub.exists());
+        assert!(foreign.exists(), "never touch other people's books");
+        assert!(feed.exists(), "the OPDS feed is not an issue file");
+        assert!(!old_epub.exists());
+        assert!(!old_x4.exists());
+        assert!(!old_xtc.exists());
+
+        // Idempotent, and tolerant of missing directories.
+        assert_eq!(prune(&conf, date("2026-08-15")).await.unwrap(), 0);
+        let missing_dirs = cfg(&dir.path().join("nowhere"));
+        assert_eq!(prune(&missing_dirs, date("2026-08-15")).await.unwrap(), 0);
+    }
+
+    #[tokio::test]
+    async fn publish_issue_does_the_whole_dance() {
+        let dir = tempfile::tempdir().unwrap();
+        let cfg = cfg(dir.path());
+        let db = Db::open_and_migrate(&dir.path().join("db.sqlite"))
+            .await
+            .unwrap();
+        let src = dir.path().join("std.epub");
+        let x4_src = dir.path().join("x4.epub");
+        let xtc_src = dir.path().join("out.xtch");
+        for (path, body) in [
+            (&src, "standard"),
+            (&x4_src, "x4"),
+            (&xtc_src, "xtch-bytes"),
+        ] {
+            std::fs::write(path, body).unwrap();
+        }
+        let artifacts = vec![
+            Artifact {
+                edition: Edition::Standard,
+                path: src,
+                bytes: 8,
+            },
+            Artifact {
+                edition: Edition::X4,
+                path: x4_src,
+                bytes: 2,
+            },
+        ];
+        let issue = fake_issue(date("2026-08-15"));
+
+        let published = publish_issue(&db, &cfg, &issue, &artifacts, Some(&xtc_src))
+            .await
+            .unwrap();
+        assert_eq!(published.epubs.len(), 2);
+        assert!(published.epubs.iter().all(|a| a.path.exists()));
+        assert_eq!(published.epubs[1].edition, Edition::X4);
+        assert!(published.xtc.as_ref().is_some_and(|p| p.exists()));
+        assert!(published.opds.as_ref().is_some_and(|p| p.exists()));
+        assert_eq!(published.pruned, 0);
+
+        let feed = std::fs::read_to_string(cfg.publish.xtc_dir.join(XTC_OPDS_FILENAME)).unwrap();
+        assert!(feed.contains("out.xtch"));
+
+        // No XTC artifact is fine — the feed is still regenerated.
+        let published = publish_issue(&db, &cfg, &issue, &artifacts, None)
+            .await
+            .unwrap();
+        assert!(published.xtc.is_none());
+        assert!(published.opds.is_some());
+    }
+
+    #[test]
+    fn helpers_escape_and_encode() {
+        assert_eq!(xml_escape("a & b < c"), "a &amp; b &lt; c");
+        assert_eq!(percent_encode("a b(c).xtch"), "a%20b%28c%29.xtch");
+        assert_eq!(human_bytes(2_500_000), "2.4 MB");
+        assert_eq!(human_bytes(4096), "4 KB");
+    }
+}
diff --git a/src/report.rs b/src/report.rs
new file mode 100644
index 0000000..ef0a5e6
--- /dev/null
+++ b/src/report.rs
@@ -0,0 +1,256 @@
+//! Run report — counts, token usage, cost, timings, status (spec §3.13 `runs`, §3.12
+//! `/issues.json`).
+//!
+//! `generate` builds one of these, prints it at the end of the run and stores the
+//! serialized form in `runs` / `issues.report_json`.
+
+use std::collections::BTreeMap;
+use std::fmt;
+
+use jiff::Timestamp;
+use jiff::civil::Date;
+use serde::{Deserialize, Serialize};
+
+use crate::types::TokenUsage;
+
+/// Terminal state of a run, stored in `runs.status`.
+#[derive(Debug, Clone, Copy, Default, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum RunStatus {
+    #[default]
+    Running,
+    /// Everything completed.
+    Ok,
+    /// The issue was produced but a best-effort stage failed (social, XTC,
+    /// world briefing, images) or the cost guardrail tripped (§3.6).
+    Degraded,
+    /// No issue was produced.
+    Failed,
+    /// `--dry-run`: nothing was published.
+    DryRun,
+}
+
+impl RunStatus {
+    pub fn as_str(self) -> &'static str {
+        match self {
+            RunStatus::Running => "running",
+            RunStatus::Ok => "ok",
+            RunStatus::Degraded => "degraded",
+            RunStatus::Failed => "failed",
+            RunStatus::DryRun => "dry_run",
+        }
+    }
+}
+
+impl fmt::Display for RunStatus {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        f.write_str(self.as_str())
+    }
+}
+
+/// Per-stage article counts as the pipeline narrows the day's feed volume (§2).
+#[derive(Debug, Clone, Copy, Default, PartialEq, Eq, Serialize, Deserialize)]
+pub struct StageCounts {
+    /// Entries returned by Miniflux inside the lookback window (§3.1).
+    pub entries_fetched: i64,
+    /// Distinct feeds those entries came from.
+    pub feeds_seen: i64,
+    /// Entries dropped as non-articles (video/audio/empty title) (§3.2).
+    pub entries_dropped: i64,
+    /// Deduped article clusters (§3.2).
+    pub articles: i64,
+    /// Clusters that merged ≥ 2 entries.
+    pub duplicates_merged: i64,
+    /// Articles whose full text was fetched + extracted (§3.3).
+    pub extracted: i64,
+    /// Articles left with only an excerpt (§3.3).
+    pub excerpt_only: i64,
+    /// Social lookups that returned a hit (§3.4).
+    pub social_hits: i64,
+    /// Articles surviving the heuristic pre-filter (§3.5).
+    pub candidates: i64,
+    /// Articles scored by the LLM (§3.6 stage A).
+    pub llm_scored: i64,
+    /// Articles in the final lineup (§3.6 stage B).
+    pub selected: i64,
+    /// Discussion chapters rendered (§3.7).
+    pub discussions: i64,
+    /// Images embedded across both editions (§3.10).
+    pub images_embedded: i64,
+}
+
+/// Wall-clock milliseconds per pipeline stage.
+#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
+pub struct StageTimings(pub BTreeMap<String, i64>);
+
+impl StageTimings {
+    pub fn record(&mut self, stage: &str, millis: i64) {
+        *self.0.entry(stage.to_string()).or_insert(0) += millis;
+    }
+
+    pub fn total_ms(&self) -> i64 {
+        self.0.values().sum()
+    }
+}
+
+/// The full summary of one `generate` invocation (§3.13).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct RunReport {
+    pub date: Date,
+    pub started_at: Timestamp,
+    pub finished_at: Option<Timestamp>,
+    pub status: RunStatus,
+    pub counts: StageCounts,
+    pub usage: TokenUsage,
+    pub cost_usd: f64,
+    pub timings: StageTimings,
+    /// Ingest window actually used, RFC3339 (§3.1).
+    pub window_start: Option<Timestamp>,
+    pub window_end: Option<Timestamp>,
+    /// Entry counts per feed title, for spotting noisy feeds (M1 verification).
+    pub per_feed_counts: BTreeMap<String, i64>,
+    /// Non-fatal problems from best-effort stages (notes §3).
+    pub warnings: Vec<String>,
+    /// Fatal error message when `status == Failed`.
+    pub error: Option<String>,
+}
+
+impl RunReport {
+    pub fn new(date: Date, started_at: Timestamp) -> Self {
+        Self {
+            date,
+            started_at,
+            finished_at: None,
+            status: RunStatus::Running,
+            counts: StageCounts::default(),
+            usage: TokenUsage::default(),
+            cost_usd: 0.0,
+            timings: StageTimings::default(),
+            window_start: None,
+            window_end: None,
+            per_feed_counts: BTreeMap::new(),
+            warnings: Vec::new(),
+            error: None,
+        }
+    }
+
+    pub fn warn(&mut self, msg: impl Into<String>) {
+        let msg = msg.into();
+        tracing::warn!(target: "daily_epub::report", "{msg}");
+        self.warnings.push(msg);
+    }
+
+    pub fn fail(&mut self, finished_at: Timestamp, err: impl fmt::Display) {
+        self.finished_at = Some(finished_at);
+        self.status = RunStatus::Failed;
+        self.error = Some(err.to_string());
+    }
+
+    /// Stamp the end time, compute cost from [`TokenUsage`] and settle the status.
+    pub fn finish(
+        &mut self,
+        finished_at: Timestamp,
+        price_input: f64,
+        price_cached: f64,
+        price_output: f64,
+    ) {
+        self.finished_at = Some(finished_at);
+        self.cost_usd = self.usage.cost_usd(price_input, price_cached, price_output);
+        if self.status == RunStatus::Running {
+            self.status = if self.warnings.is_empty() {
+                RunStatus::Ok
+            } else {
+                RunStatus::Degraded
+            };
+        }
+    }
+
+    /// Total wall-clock duration in seconds, when finished.
+    pub fn duration_secs(&self) -> Option<i64> {
+        self.finished_at
+            .map(|end| (end.as_second() - self.started_at.as_second()).max(0))
+    }
+
+    pub fn to_json(&self) -> String {
+        serde_json::to_string(self).unwrap_or_else(|_| "{}".into())
+    }
+
+    pub fn to_json_pretty(&self) -> String {
+        serde_json::to_string_pretty(self).unwrap_or_else(|_| "{}".into())
+    }
+
+    /// Compact human-readable summary printed at the end of `generate`.
+    pub fn summary_line(&self) -> String {
+        format!(
+            "{} [{}] {} entries → {} articles → {} candidates → {} selected · ${:.4} · {}s",
+            self.date,
+            self.status,
+            self.counts.entries_fetched,
+            self.counts.articles,
+            self.counts.candidates,
+            self.counts.selected,
+            self.cost_usd,
+            self.duration_secs().unwrap_or(0),
+        )
+    }
+
+    /// Feeds ordered by entry count, descending — the M1 dry-run breakdown.
+    pub fn top_feeds(&self, limit: usize) -> Vec<(&str, i64)> {
+        let mut v: Vec<(&str, i64)> = self
+            .per_feed_counts
+            .iter()
+            .map(|(k, v)| (k.as_str(), *v))
+            .collect();
+        v.sort_by(|a, b| b.1.cmp(&a.1).then_with(|| a.0.cmp(b.0)));
+        v.truncate(limit);
+        v
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn ts(s: &str) -> Timestamp {
+        s.parse().unwrap()
+    }
+
+    #[test]
+    fn finish_computes_cost_and_status() {
+        let mut r = RunReport::new("2026-08-15".parse().unwrap(), ts("2026-08-15T05:30:00Z"));
+        r.usage.add(TokenUsage {
+            input_tokens: 1_000_000,
+            cached_tokens: 1_000_000,
+            output_tokens: 1_000_000,
+        });
+        r.finish(ts("2026-08-15T05:36:00Z"), 0.14, 0.0028, 0.28);
+        assert_eq!(r.status, RunStatus::Ok);
+        assert!((r.cost_usd - 0.4228).abs() < 1e-9);
+        assert_eq!(r.duration_secs(), Some(360));
+    }
+
+    #[test]
+    fn warnings_degrade_the_run() {
+        let mut r = RunReport::new("2026-08-15".parse().unwrap(), ts("2026-08-15T05:30:00Z"));
+        r.warn("xtc converter missing");
+        r.finish(ts("2026-08-15T05:31:00Z"), 0.14, 0.0028, 0.28);
+        assert_eq!(r.status, RunStatus::Degraded);
+        assert_eq!(r.warnings.len(), 1);
+    }
+
+    #[test]
+    fn serializes_round_trip() {
+        let mut r = RunReport::new("2026-08-15".parse().unwrap(), ts("2026-08-15T05:30:00Z"));
+        r.counts.entries_fetched = 412;
+        r.per_feed_counts.insert("Hacker News".into(), 30);
+        r.per_feed_counts.insert("Lobsters".into(), 12);
+        r.timings.record("ingest", 1500);
+        r.finish(ts("2026-08-15T05:31:00Z"), 0.14, 0.0028, 0.28);
+        let json = r.to_json();
+        let back: RunReport = serde_json::from_str(&json).unwrap();
+        assert_eq!(back, r);
+        assert_eq!(back.top_feeds(1), vec![("Hacker News", 30)]);
+        assert_eq!(back.timings.total_ms(), 1500);
+        assert!(back.summary_line().contains("412 entries"));
+    }
+}
diff --git a/src/server.rs b/src/server.rs
new file mode 100644
index 0000000..335b140
--- /dev/null
+++ b/src/server.rs
@@ -0,0 +1,973 @@
+//! axum server: rating endpoints, XTC OPDS, static files (spec §3.9, §3.12).
+//!
+//! Rating links must work from an e-reader's built-in browser, so every rating
+//! endpoint is a `GET` and the response is a tiny e-ink-sized HTML page.
+//!
+//! Routes (§3.12):
+//! | route | behaviour |
+//! |---|---|
+//! | `GET /r/{date}/{article_id}/{vote}?t=` | verify HMAC, upsert rating, rebuild feed priors |
+//! | `GET /opds/xtc.xml` | static OPDS 1.2 acquisition feed from `publish.xtc_dir` |
+//! | `GET /files/xtc/{name}` | XTC artifact download (no path traversal) |
+//! | `GET /healthz` | liveness |
+//! | `GET /issues.json` | the last 30 run reports, newest first |
+//!
+//! `/opds/*` and `/files/*` sit behind optional Basic auth (`server.basic_auth_*`).
+//!
+//! The EPUB article footer (§3.10) mints its 👍/👎 links with the very same
+//! [`rating_url`] this module verifies with — both re-export [`crate::auth`],
+//! which pins the shared test vector (`secret = "test-secret"`, `2026-08-15`,
+//! article `42`, `up` → `3b314cf7e6d8f50f`). An issue generated while
+//! `server.hmac_secret` is unset carries links this server rejects with 403.
+
+use std::path::{Path as FsPath, PathBuf};
+
+use axum::Router;
+use axum::body::Body;
+use axum::extract::{Path, Query, State};
+use axum::http::{HeaderMap, HeaderValue, StatusCode, header};
+use axum::response::{IntoResponse, Response};
+use axum::routing::get;
+use base64::Engine as _;
+use base64::engine::general_purpose::STANDARD as BASE64;
+use jiff::Timestamp;
+use jiff::civil::Date;
+use serde::Deserialize;
+use tower_http::trace::TraceLayer;
+
+use crate::config::Config;
+use crate::db::Db;
+use crate::types::{ArticleId, Rating, Vote};
+
+/// Characters of the hex HMAC kept in rating links (§3.9).
+pub const TOKEN_LEN: usize = crate::auth::TOKEN_LEN;
+/// How many issues `GET /issues.json` returns (§3.12).
+pub const ISSUES_JSON_LIMIT: i64 = 30;
+/// Basic auth realm advertised for the OPDS routes (§3.11).
+pub const AUTH_REALM: &str = "The Daily EPUB";
+/// Content type of an OPDS 1.2 acquisition feed (§3.11).
+pub const OPDS_CONTENT_TYPE: &str = "application/atom+xml;profile=opds-catalog;kind=acquisition";
+
+#[derive(Debug, thiserror::Error)]
+pub enum ServerError {
+    #[error("server.hmac_secret is not configured (set DAILY_EPUB_SERVER__HMAC_SECRET)")]
+    MissingSecret,
+    #[error("could not bind {addr}: {source}")]
+    Bind {
+        addr: String,
+        #[source]
+        source: std::io::Error,
+    },
+    #[error("io error: {0}")]
+    Io(#[from] std::io::Error),
+}
+
+/// Shared axum state.
+#[derive(Debug, Clone)]
+pub struct AppState {
+    pub db: Db,
+    pub config: Config,
+}
+
+// ---------------------------------------------------------------------------
+// Rating tokens (§3.9)
+// ---------------------------------------------------------------------------
+
+// The formula lives in [`crate::auth`] so the EPUB writer and this verifier can
+// never drift apart; these re-exports keep the historical call sites intact.
+pub use crate::auth::{constant_time_eq, rating_token, rating_url, verify_token};
+
+// ---------------------------------------------------------------------------
+// Router (§3.12)
+// ---------------------------------------------------------------------------
+
+/// Build the router: `/r/{date}/{article_id}/{vote}`, `/opds/xtc.xml`,
+/// `/files/xtc/{name}`, `/healthz`, `/issues.json`, with `tower-http` tracing (§3.12).
+pub fn router(state: AppState) -> Router {
+    Router::new()
+        .route("/r/{date}/{article_id}/{vote}", get(handle_rating))
+        .route("/opds/xtc.xml", get(handle_opds))
+        // OPDS browsers are typed into by hand on a 6" e-ink keyboard: serve the
+        // same feed from the catalog root so a URL without the filename works.
+        .route("/opds", get(handle_opds))
+        .route("/opds/", get(handle_opds))
+        .route("/files/xtc/{name}", get(handle_xtc_file))
+        .route("/healthz", get(handle_healthz))
+        .route("/issues.json", get(handle_issues_json))
+        .layer(TraceLayer::new_for_http())
+        .with_state(state)
+}
+
+/// `daily-epub serve` — bind, serve, graceful shutdown on SIGTERM (§3.12).
+pub async fn serve(config: Config, db: Db) -> Result<(), ServerError> {
+    if config.server.hmac_secret.is_none() {
+        // Not fatal for the OPDS routes, but every rating link would 500.
+        tracing::warn!("server.hmac_secret is unset — rating links will be rejected");
+    }
+    let addr = config.server.bind.clone();
+    let listener = tokio::net::TcpListener::bind(&addr)
+        .await
+        .map_err(|source| ServerError::Bind {
+            addr: addr.clone(),
+            source,
+        })?;
+    let local = listener.local_addr().map(|a| a.to_string()).unwrap_or(addr);
+    tracing::info!(bind = %local, public_url = %config.server.public_url, "serving");
+
+    let app = router(AppState { db, config });
+    axum::serve(listener, app)
+        .with_graceful_shutdown(shutdown_signal())
+        .await?;
+    tracing::info!("server stopped");
+    Ok(())
+}
+
+/// Resolve on SIGTERM (systemd stop) or ctrl-c (§3.12, §3.15).
+async fn shutdown_signal() {
+    let ctrl_c = async {
+        if let Err(e) = tokio::signal::ctrl_c().await {
+            tracing::error!(error = %e, "failed to install the ctrl-c handler");
+            std::future::pending::<()>().await;
+        }
+    };
+    let terminate = async {
+        match tokio::signal::unix::signal(tokio::signal::unix::SignalKind::terminate()) {
+            Ok(mut sig) => {
+                sig.recv().await;
+            }
+            Err(e) => {
+                tracing::error!(error = %e, "failed to install the SIGTERM handler");
+                std::future::pending::<()>().await;
+            }
+        }
+    };
+    tokio::select! {
+        _ = ctrl_c => tracing::info!("ctrl-c received, shutting down"),
+        _ = terminate => tracing::info!("SIGTERM received, shutting down"),
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Handlers
+// ---------------------------------------------------------------------------
+
+#[derive(Debug, Deserialize)]
+pub struct TokenQuery {
+    #[serde(default)]
+    t: String,
+}
+
+async fn handle_healthz() -> Response {
+    (
+        StatusCode::OK,
+        [(header::CONTENT_TYPE, "text/plain; charset=utf-8")],
+        "ok",
+    )
+        .into_response()
+}
+
+/// `GET /issues.json` — the last [`ISSUES_JSON_LIMIT`] run reports, newest first (§3.12).
+async fn handle_issues_json(State(state): State<AppState>) -> Response {
+    let rows = match state.db.recent_reports(ISSUES_JSON_LIMIT).await {
+        Ok(rows) => rows,
+        Err(e) => {
+            tracing::error!(error = %e, "issues.json query failed");
+            return (StatusCode::INTERNAL_SERVER_ERROR, "database error").into_response();
+        }
+    };
+    let issues: Vec<serde_json::Value> = rows
+        .into_iter()
+        .map(|(date, report)| {
+            let report = report
+                .as_deref()
+                .and_then(|r| serde_json::from_str::<serde_json::Value>(r).ok())
+                .unwrap_or(serde_json::Value::Null);
+            serde_json::json!({ "date": date.to_string(), "report": report })
+        })
+        .collect();
+    match serde_json::to_string_pretty(&issues) {
+        Ok(body) => (
+            StatusCode::OK,
+            [(header::CONTENT_TYPE, "application/json")],
+            body,
+        )
+            .into_response(),
+        Err(e) => {
+            tracing::error!(error = %e, "serializing issues.json failed");
+            (StatusCode::INTERNAL_SERVER_ERROR, "serialization error").into_response()
+        }
+    }
+}
+
+/// `GET /r/{date}/{article_id}/{vote}?t=TOKEN` (§3.9).
+async fn handle_rating(
+    State(state): State<AppState>,
+    Path((date, article_id, vote)): Path<(String, String, String)>,
+    Query(query): Query<TokenQuery>,
+) -> Response {
+    let Ok(date) = date.parse::<Date>() else {
+        tracing::warn!(%date, "rating link with a malformed date");
+        return page(StatusCode::BAD_REQUEST, "Bad link — invalid date.", None);
+    };
+    let Ok(article_id) = article_id.parse::<ArticleId>() else {
+        return page(StatusCode::BAD_REQUEST, "Bad link — invalid article.", None);
+    };
+    let Some(vote) = Vote::parse(&vote) else {
+        return page(StatusCode::BAD_REQUEST, "Bad link — invalid vote.", None);
+    };
+
+    let Some(secret) = state.config.server.hmac_secret.as_deref() else {
+        tracing::error!("rating request but server.hmac_secret is unset");
+        return page(
+            StatusCode::INTERNAL_SERVER_ERROR,
+            "Server misconfigured.",
+            None,
+        );
+    };
+    if !verify_token(secret, date, article_id, vote, &query.t) {
+        tracing::warn!(%date, article_id, vote = vote.as_str(), "rejected rating token");
+        return page(StatusCode::FORBIDDEN, "Invalid link.", None);
+    }
+
+    let article = match state.db.get_article(article_id).await {
+        Ok(Some(a)) => a,
+        Ok(None) => {
+            tracing::warn!(article_id, "rating for an unknown article");
+            return page(StatusCode::NOT_FOUND, "Unknown article.", None);
+        }
+        Err(e) => {
+            tracing::error!(error = %e, article_id, "loading the rated article failed");
+            return page(StatusCode::INTERNAL_SERVER_ERROR, "Database error.", None);
+        }
+    };
+
+    let rating = Rating {
+        issue_date: date,
+        article_id,
+        vote,
+        rated_at: Timestamp::now(),
+    };
+    let changed = match state.db.upsert_rating(&rating).await {
+        Ok(changed) => changed,
+        Err(e) => {
+            tracing::error!(error = %e, article_id, "recording the rating failed");
+            return page(StatusCode::INTERNAL_SERVER_ERROR, "Database error.", None);
+        }
+    };
+    if changed && let Err(e) = crate::curate::profile::rebuild_feed_priors(&state.db).await {
+        // The vote is stored; a stale prior only affects the next run's ranking.
+        tracing::error!(error = %e, "refreshing feed priors failed");
+    }
+    tracing::info!(
+        %date,
+        article_id,
+        feed_id = article.feed_id,
+        vote = vote.as_str(),
+        changed,
+        title = %article.title,
+        "recorded rating"
+    );
+
+    let glyph = match vote {
+        Vote::Up => "👍",
+        Vote::Down => "👎",
+    };
+    let message = if changed {
+        format!("Recorded {glyph} — thanks!")
+    } else {
+        format!("Already recorded {glyph} — thanks!")
+    };
+    page(
+        StatusCode::OK,
+        &message,
+        Some(&format!("{date} · article {article_id}")),
+    )
+}
+
+/// `GET /opds/xtc.xml` — the static feed written by [`crate::publish`] (§3.11).
+async fn handle_opds(State(state): State<AppState>, headers: HeaderMap) -> Response {
+    if let Some(challenge) = check_basic_auth(&state.config, &headers) {
+        return challenge;
+    }
+    let path = state
+        .config
+        .publish
+        .xtc_dir
+        .join(crate::publish::XTC_OPDS_FILENAME);
+    match tokio::fs::read(&path).await {
+        Ok(bytes) => (
+            StatusCode::OK,
+            [
+                (header::CONTENT_TYPE, OPDS_CONTENT_TYPE),
+                (header::CACHE_CONTROL, "no-cache"),
+            ],
+            bytes,
+        )
+            .into_response(),
+        Err(e) => {
+            tracing::warn!(error = %e, path = %path.display(), "no XTC OPDS feed yet");
+            (StatusCode::NOT_FOUND, "no feed yet").into_response()
+        }
+    }
+}
+
+/// `GET /files/xtc/{name}` — download one XTC artifact (§3.11).
+async fn handle_xtc_file(
+    State(state): State<AppState>,
+    Path(name): Path<String>,
+    headers: HeaderMap,
+) -> Response {
+    if let Some(challenge) = check_basic_auth(&state.config, &headers) {
+        return challenge;
+    }
+    let Some(path) = safe_join(&state.config.publish.xtc_dir, &name) else {
+        tracing::warn!(name, "rejected an unsafe XTC file name");
+        return (StatusCode::BAD_REQUEST, "bad file name").into_response();
+    };
+    // An XTCH issue is a pre-rendered page bitmap per page — ~100 MB for a full
+    // day. Stream it rather than buffering the whole file per request (§3.11).
+    let (file, len) = match tokio::fs::File::open(&path).await {
+        Ok(file) => {
+            let len = file.metadata().await.map(|m| m.len()).ok();
+            (file, len)
+        }
+        Err(e) => {
+            tracing::warn!(error = %e, path = %path.display(), "XTC file not found");
+            return (StatusCode::NOT_FOUND, "not found").into_response();
+        }
+    };
+    let content_type = if name.ends_with(".xml") {
+        OPDS_CONTENT_TYPE
+    } else {
+        "application/octet-stream"
+    };
+    let mut headers = HeaderMap::new();
+    headers.insert(header::CONTENT_TYPE, HeaderValue::from_static(content_type));
+    if let Ok(value) = HeaderValue::from_str(&format!(
+        "attachment; filename=\"{}\"",
+        name.replace('"', "")
+    )) {
+        headers.insert(header::CONTENT_DISPOSITION, value);
+    }
+    // CrossPoint shows a progress bar only when it knows the size up front.
+    if let Some(len) = len
+        && let Ok(value) = HeaderValue::from_str(&len.to_string())
+    {
+        headers.insert(header::CONTENT_LENGTH, value);
+    }
+    let body = Body::from_stream(tokio_util::io::ReaderStream::new(file));
+    (StatusCode::OK, headers, body).into_response()
+}
+
+/// Resolve `name` inside `dir`, rejecting anything that could escape it (§3.12).
+///
+/// The name must be a single, plain file name: no separators, no `..`, no
+/// absolute paths, no hidden files, and — belt and braces — the joined path must
+/// still live inside `dir` once resolved.
+pub fn safe_join(dir: &FsPath, name: &str) -> Option<PathBuf> {
+    if name.is_empty()
+        || name.len() > 255
+        || name.starts_with('.')
+        || name.contains('/')
+        || name.contains('\\')
+        || name.contains('\0')
+        || name.contains("..")
+    {
+        return None;
+    }
+    let mut components = FsPath::new(name).components();
+    let only = match (components.next(), components.next()) {
+        (Some(std::path::Component::Normal(c)), None) => c.to_owned(),
+        _ => return None,
+    };
+    let candidate = dir.join(only);
+    // When both sides resolve, require containment (defends against symlinked names).
+    match (candidate.canonicalize(), dir.canonicalize()) {
+        (Ok(resolved), Ok(root)) if !resolved.starts_with(&root) => None,
+        _ => Some(candidate),
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Basic auth (§3.11 optional OPDS credentials)
+// ---------------------------------------------------------------------------
+
+/// `Some(challenge_response)` when the request must be rejected, `None` when it
+/// may proceed (including when no credentials are configured).
+fn check_basic_auth(config: &Config, headers: &HeaderMap) -> Option<Response> {
+    let (Some(user), Some(pass)) = (
+        config.server.basic_auth_user.as_deref(),
+        config.server.basic_auth_pass.as_deref(),
+    ) else {
+        return None;
+    };
+    let expected = BASE64.encode(format!("{user}:{pass}"));
+    let supplied = headers
+        .get(header::AUTHORIZATION)
+        .and_then(|v| v.to_str().ok())
+        .and_then(|v| v.strip_prefix("Basic "))
+        .map(str::trim)
+        .unwrap_or_default();
+    if constant_time_eq(expected.as_bytes(), supplied.as_bytes()) {
+        return None;
+    }
+    tracing::warn!("rejected an unauthenticated OPDS request");
+    let challenge =
+        HeaderValue::from_str(&format!("Basic realm=\"{AUTH_REALM}\", charset=\"UTF-8\""))
+            .unwrap_or(HeaderValue::from_static("Basic"));
+    Some(
+        (
+            StatusCode::UNAUTHORIZED,
+            [(header::WWW_AUTHENTICATE, challenge)],
+            "authentication required",
+        )
+            .into_response(),
+    )
+}
+
+// ---------------------------------------------------------------------------
+// Tiny e-ink pages (§3.9)
+// ---------------------------------------------------------------------------
+
+/// A self-contained response page — no external CSS, well under 1 KB, legible on
+/// a 6" e-ink browser (§3.9).
+fn page(status: StatusCode, message: &str, note: Option<&str>) -> Response {
+    let body = page_html(message, note);
+    (
+        status,
+        [
+            (header::CONTENT_TYPE, "text/html; charset=utf-8"),
+            (header::CACHE_CONTROL, "no-store"),
+        ],
+        body,
+    )
+        .into_response()
+}
+
+/// The page markup itself: no stylesheet, no script, no images (§3.9).
+fn page_html(message: &str, note: Option<&str>) -> String {
+    let note = note
+        .map(|n| format!("<p><small>{}</small></p>", escape(n)))
+        .unwrap_or_default();
+    format!(
+        "<!doctype html><html lang=\"en\"><meta charset=\"utf-8\">\
+<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\
+<title>The Daily EPUB</title>\
+<style>body{{margin:3em auto;max-width:16em;padding:0 1em;text-align:center;\
+font:1.3em/1.5 Georgia,serif}}small{{font-size:.65em}}</style>\
+<p>{}</p>{}",
+        escape(message),
+        note
+    )
+}
+
+fn escape(s: &str) -> String {
+    s.replace('&', "&amp;")
+        .replace('<', "&lt;")
+        .replace('>', "&gt;")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::types::{Article, ExtractMethod, SourceKind, SourceRef};
+
+    fn date() -> Date {
+        "2026-08-15".parse().unwrap()
+    }
+
+    fn ts(s: &str) -> Timestamp {
+        s.parse().unwrap()
+    }
+
+    /// The shared fixture vector: the EPUB footer builder must produce the same
+    /// token for these inputs (§3.9).
+    const VECTOR_SECRET: &str = "test-secret";
+    const VECTOR_TOKEN_UP: &str = "3b314cf7e6d8f50f";
+
+    #[test]
+    fn token_matches_the_shared_test_vector() {
+        assert_eq!(
+            rating_token(VECTOR_SECRET, date(), 42, Vote::Up),
+            VECTOR_TOKEN_UP
+        );
+        assert_eq!(rating_token(VECTOR_SECRET, date(), 42, Vote::Up).len(), 16);
+        // Down differs from up, and both verify.
+        let down = rating_token(VECTOR_SECRET, date(), 42, Vote::Down);
+        assert_ne!(down, VECTOR_TOKEN_UP);
+        assert!(verify_token(
+            VECTOR_SECRET,
+            date(),
+            42,
+            Vote::Up,
+            VECTOR_TOKEN_UP
+        ));
+        assert!(verify_token(VECTOR_SECRET, date(), 42, Vote::Down, &down));
+    }
+
+    /// The links the EPUB footer embeds must verify here — this is the whole
+    /// feedback loop in one assertion (§3.9).
+    #[test]
+    fn epub_footer_links_verify_against_this_server() {
+        for (id, vote) in [(42, Vote::Up), (1234, Vote::Down)] {
+            let from_epub = crate::epub::build::rating_url(
+                "https://daily.hallada.net",
+                VECTOR_SECRET,
+                date(),
+                id,
+                vote,
+            );
+            assert_eq!(
+                from_epub,
+                rating_url("https://daily.hallada.net", VECTOR_SECRET, date(), id, vote)
+            );
+            let token = from_epub.rsplit("?t=").next().unwrap_or_default();
+            assert!(
+                verify_token(VECTOR_SECRET, date(), id, vote, token),
+                "{from_epub}"
+            );
+        }
+    }
+
+    #[test]
+    fn token_verification_rejects_tampering() {
+        let t = rating_token(VECTOR_SECRET, date(), 42, Vote::Up);
+        assert!(!verify_token(VECTOR_SECRET, date(), 42, Vote::Down, &t));
+        assert!(!verify_token(VECTOR_SECRET, date(), 43, Vote::Up, &t));
+        assert!(!verify_token("other-secret", date(), 42, Vote::Up, &t));
+        assert!(!verify_token(
+            VECTOR_SECRET,
+            "2026-08-16".parse().unwrap(),
+            42,
+            Vote::Up,
+            &t
+        ));
+        assert!(!verify_token(VECTOR_SECRET, date(), 42, Vote::Up, ""));
+        assert!(!verify_token(
+            VECTOR_SECRET,
+            date(),
+            42,
+            Vote::Up,
+            &format!("{t}00")
+        ));
+    }
+
+    #[test]
+    fn rating_url_is_the_link_the_epub_embeds() {
+        assert_eq!(
+            rating_url(
+                "https://daily.hallada.net/",
+                VECTOR_SECRET,
+                date(),
+                42,
+                Vote::Up
+            ),
+            format!("https://daily.hallada.net/r/2026-08-15/42/up?t={VECTOR_TOKEN_UP}")
+        );
+    }
+
+    #[test]
+    fn constant_time_eq_behaves_like_eq() {
+        assert!(constant_time_eq(b"abc", b"abc"));
+        assert!(!constant_time_eq(b"abc", b"abd"));
+        assert!(!constant_time_eq(b"abc", b"abcd"));
+        assert!(!constant_time_eq(b"", b"a"));
+        assert!(constant_time_eq(b"", b""));
+    }
+
+    #[test]
+    fn safe_join_rejects_traversal() {
+        let dir = FsPath::new("/var/lib/daily-epub/xtc");
+        assert_eq!(
+            safe_join(dir, "The Daily EPUB - 2026-08-15 (X4).xtch"),
+            Some(dir.join("The Daily EPUB - 2026-08-15 (X4).xtch"))
+        );
+        for bad in [
+            "",
+            "..",
+            "../secret",
+            "..%2Fsecret",
+            "a/../../secret",
+            "sub/dir.xtch",
+            "/etc/passwd",
+            ".hidden",
+            "back\\slash",
+        ] {
+            assert!(safe_join(dir, bad).is_none(), "should reject {bad:?}");
+        }
+        // Percent-decoding happens before us: a decoded traversal is rejected too.
+        assert!(safe_join(dir, "../../etc/passwd").is_none());
+    }
+
+    #[test]
+    fn the_confirmation_page_is_tiny_and_self_contained() {
+        let html = page_html("Recorded 👍 — thanks!", Some("2026-08-15 · article 42"));
+        assert!(html.len() < 1024, "page is {} bytes", html.len());
+        assert!(!html.contains("<link"), "no external stylesheet");
+        assert!(!html.contains("<script"), "no script");
+        assert!(html.contains("Recorded 👍"));
+        assert_eq!(
+            page(StatusCode::FORBIDDEN, "Invalid link.", None).status(),
+            StatusCode::FORBIDDEN
+        );
+        assert!(page_html("<b>x</b>", None).contains("&lt;b&gt;"));
+    }
+
+    // -----------------------------------------------------------------
+    // End-to-end over a real listener (the crate has no lib target, so the
+    // HTTP-level tests live here rather than in `tests/`).
+    // -----------------------------------------------------------------
+
+    struct TestServer {
+        base: String,
+        db: Db,
+        _dir: tempfile::TempDir,
+        handle: tokio::task::JoinHandle<()>,
+    }
+
+    impl TestServer {
+        async fn start(with_auth: bool) -> TestServer {
+            let dir = tempfile::tempdir().unwrap();
+            let xtc_dir = dir.path().join("xtc");
+            std::fs::create_dir_all(&xtc_dir).unwrap();
+            let db = Db::open_and_migrate(&dir.path().join("db.sqlite"))
+                .await
+                .unwrap();
+
+            let mut config = Config::default();
+            config.server.hmac_secret = Some(VECTOR_SECRET.into());
+            config.publish.xtc_dir = xtc_dir;
+            if with_auth {
+                config.server.basic_auth_user = Some("opds".into());
+                config.server.basic_auth_pass = Some("hunter2".into());
+            }
+
+            let listener = tokio::net::TcpListener::bind("127.0.0.1:0").await.unwrap();
+            let addr = listener.local_addr().unwrap();
+            let app = router(AppState {
+                db: db.clone(),
+                config,
+            });
+            let handle = tokio::spawn(async move {
+                axum::serve(listener, app).await.unwrap();
+            });
+            TestServer {
+                base: format!("http://{addr}"),
+                db,
+                _dir: dir,
+                handle,
+            }
+        }
+
+        fn xtc_dir(&self) -> PathBuf {
+            self._dir.path().join("xtc")
+        }
+
+        async fn seed_article(&self) -> ArticleId {
+            let entry = crate::types::Entry {
+                id: 1,
+                feed_id: 7,
+                feed_title: Some("Hacker News".into()),
+                category: None,
+                title: "Story".into(),
+                url: "https://example.com/1".into(),
+                canonical_url: Some("https://example.com/1".into()),
+                author: None,
+                published_at: Some(ts("2026-08-15T04:00:00Z")),
+                comments_url: None,
+                raw_content: "<p>hi</p>".into(),
+                fetched_at: ts("2026-08-15T05:30:00Z"),
+            };
+            self.db.upsert_entry(&entry).await.unwrap();
+            let article = Article {
+                id: 0,
+                canonical_url: "https://example.com/1".into(),
+                title: "Story".into(),
+                best_entry_id: 1,
+                content_html: "<p>hi</p>".into(),
+                word_count: 500,
+                excerpt_only: false,
+                image_count: 0,
+                sources: vec![SourceRef {
+                    entry_id: 1,
+                    feed_id: 7,
+                    feed_title: "Hacker News".into(),
+                    category: None,
+                    kind: SourceKind::HnFrontpage,
+                }],
+                first_seen: ts("2026-08-15T05:30:00Z"),
+                url: "https://example.com/1".into(),
+                author: None,
+                feed_id: 7,
+                feed_title: "Hacker News".into(),
+                category: None,
+                published_at: None,
+                comments_url: None,
+                image_urls: vec![],
+                social: vec![],
+                extract_method: ExtractMethod::Miniflux,
+            };
+            self.db.upsert_article(&article).await.unwrap()
+        }
+    }
+
+    impl Drop for TestServer {
+        fn drop(&mut self) {
+            self.handle.abort();
+        }
+    }
+
+    fn client() -> reqwest::Client {
+        reqwest::Client::builder().build().unwrap()
+    }
+
+    #[tokio::test]
+    async fn healthz_and_issues_json() {
+        let server = TestServer::start(false).await;
+        let res = client()
+            .get(format!("{}/healthz", server.base))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 200);
+        assert_eq!(res.text().await.unwrap(), "ok");
+
+        let res = client()
+            .get(format!("{}/issues.json", server.base))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 200);
+        let body: serde_json::Value = res.json().await.unwrap();
+        assert_eq!(body.as_array().map(Vec::len), Some(0));
+
+        // Newest first, report JSON inlined.
+        for (day, n) in [("2026-08-13", 1), ("2026-08-15", 3), ("2026-08-14", 2)] {
+            server
+                .db
+                .upsert_issue(
+                    day.parse().unwrap(),
+                    n,
+                    ts("2026-08-15T05:30:00Z"),
+                    None,
+                    None,
+                    None,
+                    None,
+                    Some(&format!("{{\"selected\":{n}}}")),
+                )
+                .await
+                .unwrap();
+        }
+        let body: serde_json::Value = client()
+            .get(format!("{}/issues.json", server.base))
+            .send()
+            .await
+            .unwrap()
+            .json()
+            .await
+            .unwrap();
+        let dates: Vec<&str> = body
+            .as_array()
+            .unwrap()
+            .iter()
+            .map(|v| v["date"].as_str().unwrap())
+            .collect();
+        assert_eq!(dates, ["2026-08-15", "2026-08-14", "2026-08-13"]);
+        assert_eq!(body[0]["report"]["selected"], 3);
+    }
+
+    #[tokio::test]
+    async fn rating_happy_path_is_idempotent_and_updates_priors() {
+        let server = TestServer::start(false).await;
+        let id = server.seed_article().await;
+        let url = rating_url(&server.base, VECTOR_SECRET, date(), id, Vote::Up);
+
+        let res = client().get(&url).send().await.unwrap();
+        assert_eq!(res.status(), 200);
+        let body = res.text().await.unwrap();
+        assert!(body.contains("Recorded"), "{body}");
+        assert!(!body.contains("Already"), "{body}");
+        assert!(
+            body.len() < 1024,
+            "confirmation page is {} bytes",
+            body.len()
+        );
+
+        // Same tap again: still 200, but reported as already recorded.
+        let body = client()
+            .get(&url)
+            .send()
+            .await
+            .unwrap()
+            .text()
+            .await
+            .unwrap();
+        assert!(body.contains("Already recorded"), "{body}");
+
+        let ratings = server.db.ratings_with_feed().await.unwrap();
+        assert_eq!(ratings, vec![(7, Vote::Up)]);
+        let priors = server.db.feed_priors().await.unwrap();
+        assert_eq!(priors.len(), 1);
+        assert_eq!(
+            (priors[0].feed_id, priors[0].upvotes, priors[0].downvotes),
+            (7, 1, 0)
+        );
+
+        // Flipping the vote rewrites the prior rather than double-counting.
+        let down = rating_url(&server.base, VECTOR_SECRET, date(), id, Vote::Down);
+        assert_eq!(client().get(&down).send().await.unwrap().status(), 200);
+        let priors = server.db.feed_priors().await.unwrap();
+        assert_eq!((priors[0].upvotes, priors[0].downvotes), (0, 1));
+    }
+
+    #[tokio::test]
+    async fn rating_rejects_bad_tokens_dates_and_unknown_articles() {
+        let server = TestServer::start(false).await;
+        let id = server.seed_article().await;
+
+        let bad = format!("{}/r/2026-08-15/{id}/up?t=deadbeefdeadbeef", server.base);
+        assert_eq!(client().get(&bad).send().await.unwrap().status(), 403);
+        let missing = format!("{}/r/2026-08-15/{id}/up", server.base);
+        assert_eq!(client().get(&missing).send().await.unwrap().status(), 403);
+
+        // A valid token for an article that does not exist.
+        let unknown = rating_url(&server.base, VECTOR_SECRET, date(), 9999, Vote::Up);
+        assert_eq!(client().get(&unknown).send().await.unwrap().status(), 404);
+
+        // Malformed date / vote.
+        let token = rating_token(VECTOR_SECRET, date(), id, Vote::Up);
+        let bad_date = format!("{}/r/not-a-date/{id}/up?t={token}", server.base);
+        assert_eq!(client().get(&bad_date).send().await.unwrap().status(), 400);
+        let bad_vote = format!("{}/r/2026-08-15/{id}/sideways?t={token}", server.base);
+        assert_eq!(client().get(&bad_vote).send().await.unwrap().status(), 400);
+
+        assert!(server.db.ratings_with_feed().await.unwrap().is_empty());
+    }
+
+    #[tokio::test]
+    async fn opds_and_files_are_served_behind_basic_auth() {
+        let server = TestServer::start(true).await;
+        std::fs::write(
+            server.xtc_dir().join(crate::publish::XTC_OPDS_FILENAME),
+            "<feed/>",
+        )
+        .unwrap();
+        std::fs::write(
+            server
+                .xtc_dir()
+                .join("The Daily EPUB - 2026-08-15 (X4).xtch"),
+            b"XTCH",
+        )
+        .unwrap();
+
+        let res = client()
+            .get(format!("{}/opds/xtc.xml", server.base))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 401);
+        assert!(
+            res.headers()
+                .get("www-authenticate")
+                .and_then(|v| v.to_str().ok())
+                .unwrap_or_default()
+                .starts_with("Basic realm=")
+        );
+
+        let res = client()
+            .get(format!("{}/opds/xtc.xml", server.base))
+            .basic_auth("opds", Some("wrong"))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 401);
+
+        let res = client()
+            .get(format!("{}/opds/xtc.xml", server.base))
+            .basic_auth("opds", Some("hunter2"))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 200);
+        assert!(
+            res.headers()[header::CONTENT_TYPE]
+                .to_str()
+                .unwrap()
+                .starts_with("application/atom+xml")
+        );
+        assert_eq!(res.text().await.unwrap(), "<feed/>");
+
+        // The catalog root serves the same feed, behind the same auth.
+        for alias in ["/opds", "/opds/"] {
+            let res = client()
+                .get(format!("{}{alias}", server.base))
+                .send()
+                .await
+                .unwrap();
+            assert_eq!(res.status(), 401, "{alias}");
+            let res = client()
+                .get(format!("{}{alias}", server.base))
+                .basic_auth("opds", Some("hunter2"))
+                .send()
+                .await
+                .unwrap();
+            assert_eq!(res.status(), 200, "{alias}");
+            assert_eq!(res.text().await.unwrap(), "<feed/>", "{alias}");
+        }
+
+        let res = client()
+            .get(format!(
+                "{}/files/xtc/The%20Daily%20EPUB%20-%202026-08-15%20(X4).xtch",
+                server.base
+            ))
+            .basic_auth("opds", Some("hunter2"))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 200);
+        // CrossPoint needs the size up front to show download progress.
+        assert_eq!(res.content_length(), Some(4));
+        assert_eq!(res.bytes().await.unwrap().as_ref(), b"XTCH");
+
+        // Ratings are not behind auth (the token is the credential).
+        assert_eq!(
+            client()
+                .get(format!("{}/healthz", server.base))
+                .send()
+                .await
+                .unwrap()
+                .status(),
+            200
+        );
+    }
+
+    #[tokio::test]
+    async fn file_route_rejects_path_traversal() {
+        let server = TestServer::start(false).await;
+        std::fs::write(server._dir.path().join("secret"), b"top secret").unwrap();
+
+        // Encoded traversal survives URL normalization and reaches the handler.
+        let res = client()
+            .get(format!("{}/files/xtc/..%2Fsecret", server.base))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 400);
+        let res = client()
+            .get(format!(
+                "{}/files/xtc/%2e%2e%2f%2e%2e%2fsecret",
+                server.base
+            ))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 400);
+        // A plain `..` segment is not even a match for the single-segment route.
+        let res = client()
+            .get(format!("{}/files/xtc/nope.xtch", server.base))
+            .send()
+            .await
+            .unwrap();
+        assert_eq!(res.status(), 404);
+    }
+}
diff --git a/src/social/hn.rs b/src/social/hn.rs
new file mode 100644
index 0000000..7a6f8e0
--- /dev/null
+++ b/src/social/hn.rs
@@ -0,0 +1,366 @@
+//! HackerNews via the Algolia API (spec §3.4, §3.7).
+
+use jiff::Timestamp;
+use serde::Deserialize;
+use url::Url;
+
+use super::SocialError;
+use crate::types::{ArticleId, Comment, CommentThread, SocialRef, SocialSource};
+
+/// Algolia search endpoint (free, generous limits) (§3.4).
+pub const SEARCH_URL: &str = "https://hn.algolia.com/api/v1/search";
+/// Algolia item-tree endpoint used for comment chapters (§3.7).
+pub const ITEM_URL: &str = "https://hn.algolia.com/api/v1/items";
+/// Canonical HN item page prefix.
+pub const ITEM_PAGE: &str = "https://news.ycombinator.com/item?id=";
+
+/// Hits requested per URL search — enough to spot the canonical submission.
+const HITS_PER_PAGE: &str = "10";
+
+// ---------------------------------------------------------------------------
+// Wire types
+// ---------------------------------------------------------------------------
+
+/// One Algolia search hit (only the fields §3.4 uses).
+#[derive(Debug, Clone, Deserialize)]
+pub struct Hit {
+    #[serde(rename = "objectID")]
+    pub object_id: String,
+    #[serde(default)]
+    pub title: Option<String>,
+    #[serde(default)]
+    pub url: Option<String>,
+    #[serde(default)]
+    pub points: Option<i64>,
+    #[serde(default)]
+    pub num_comments: Option<i64>,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct SearchResponse {
+    #[serde(default)]
+    hits: Vec<Hit>,
+}
+
+/// A node of the Algolia item tree (`/items/{id}`) (§3.7).
+#[derive(Debug, Clone, Deserialize)]
+struct Item {
+    #[serde(default)]
+    id: Option<i64>,
+    #[serde(default, rename = "type")]
+    kind: Option<String>,
+    #[serde(default)]
+    author: Option<String>,
+    // The story's own `title` is deliberately not deserialized here: the comment
+    // renderer takes the article title from the `Pick`, not from Algolia (§3.7).
+    #[serde(default)]
+    text: Option<String>,
+    #[serde(default)]
+    points: Option<i64>,
+    #[serde(default)]
+    children: Vec<Item>,
+}
+
+// ---------------------------------------------------------------------------
+// Pure parsing (unit-tested against `tests/fixtures/hn_*.json`)
+// ---------------------------------------------------------------------------
+
+/// Extract the story id from a `news.ycombinator.com/item?id=N` comments URL (§3.4).
+pub fn story_id_from_comments_url(comments_url: &str) -> Option<String> {
+    let url = Url::parse(comments_url.trim()).ok()?;
+    let host = url.host_str()?.to_ascii_lowercase();
+    if host != "news.ycombinator.com" && !host.ends_with(".ycombinator.com") {
+        return None;
+    }
+    if !url.path().starts_with("/item") {
+        return None;
+    }
+    url.query_pairs()
+        .find(|(k, _)| k == "id")
+        .map(|(_, v)| v.into_owned())
+        .filter(|id| !id.is_empty() && id.chars().all(|c| c.is_ascii_digit()))
+}
+
+fn parse_hits(body: &str) -> Result<Vec<Hit>, SocialError> {
+    serde_json::from_str::<SearchResponse>(body)
+        .map(|r| r.hits)
+        .map_err(|e| SocialError::Unexpected {
+            platform: "hn",
+            detail: e.to_string(),
+        })
+}
+
+/// Turn a search response into the best [`SocialRef`] for `canonical_url` (§3.4).
+///
+/// Prefers a hit whose own URL canonicalizes to `canonical_url`; otherwise the
+/// highest-scoring hit wins (Algolia sorts by relevance, not points).
+pub fn parse_search_response(
+    body: &str,
+    canonical_url: &str,
+    article_id: ArticleId,
+    fetched_at: Timestamp,
+) -> Result<Option<SocialRef>, SocialError> {
+    let hits = parse_hits(body)?;
+    Ok(best_hit(&hits, Some(canonical_url)).map(|hit| social_ref(hit, article_id, fetched_at)))
+}
+
+/// Turn a `search?tags=story_{id}` response into a [`SocialRef`] (§3.4).
+pub fn parse_story_response(
+    body: &str,
+    article_id: ArticleId,
+    fetched_at: Timestamp,
+) -> Result<Option<SocialRef>, SocialError> {
+    let hits = parse_hits(body)?;
+    Ok(best_hit(&hits, None).map(|hit| social_ref(hit, article_id, fetched_at)))
+}
+
+fn best_hit<'a>(hits: &'a [Hit], canonical_url: Option<&str>) -> Option<&'a Hit> {
+    let exact = canonical_url.and_then(|want| {
+        hits.iter()
+            .filter(|h| {
+                h.url
+                    .as_deref()
+                    .and_then(crate::dedupe::canonical_url)
+                    .is_some_and(|c| c == want)
+            })
+            .max_by_key(|h| h.points.unwrap_or(0))
+    });
+    exact.or_else(|| hits.iter().max_by_key(|h| h.points.unwrap_or(0)))
+}
+
+fn social_ref(hit: &Hit, article_id: ArticleId, fetched_at: Timestamp) -> SocialRef {
+    SocialRef {
+        article_id,
+        source: SocialSource::Hn,
+        item_id: Some(hit.object_id.clone()),
+        score: hit.points.unwrap_or(0),
+        num_comments: hit.num_comments.unwrap_or(0),
+        item_url: Some(format!("{ITEM_PAGE}{}", hit.object_id)),
+        fetched_at,
+    }
+}
+
+/// Parse `/items/{id}` into a [`CommentThread`] (§3.7).
+///
+/// The tree is returned in full; [`crate::comments::truncate`] applies the §3.7
+/// display limits.
+pub fn parse_item_response(body: &str) -> Result<CommentThread, SocialError> {
+    let item: Item = serde_json::from_str(body).map_err(|e| SocialError::Unexpected {
+        platform: "hn",
+        detail: e.to_string(),
+    })?;
+    let object_id = item.id.map(|i| i.to_string()).unwrap_or_default();
+    let comments = map_children(&item.children, 0);
+    let total = count_comments(&item.children);
+    Ok(CommentThread {
+        source: SocialSource::Hn,
+        item_url: format!("{ITEM_PAGE}{object_id}"),
+        total_comments: total,
+        comments,
+    })
+}
+
+fn map_children(children: &[Item], depth: usize) -> Vec<Comment> {
+    children
+        .iter()
+        .filter(|c| c.kind.as_deref() != Some("story"))
+        .filter_map(|child| {
+            let text = child.text.as_deref().unwrap_or("").trim();
+            let kids = map_children(&child.children, depth + 1);
+            if text.is_empty() && kids.is_empty() {
+                return None; // deleted comment with no surviving replies
+            }
+            Some(Comment {
+                author: child.author.clone().unwrap_or_else(|| "[deleted]".into()),
+                points: child.points,
+                text_html: crate::extract::sanitize(text),
+                depth,
+                children: kids,
+            })
+        })
+        .collect()
+}
+
+fn count_comments(children: &[Item]) -> i64 {
+    children
+        .iter()
+        .map(|c| 1 + count_comments(&c.children))
+        .sum()
+}
+
+// ---------------------------------------------------------------------------
+// Network
+// ---------------------------------------------------------------------------
+
+async fn get_text(
+    http: &reqwest::Client,
+    url: &str,
+    query: &[(&str, &str)],
+) -> Result<String, SocialError> {
+    let response = http.get(url).query(query).send().await?;
+    if response.status() == reqwest::StatusCode::TOO_MANY_REQUESTS {
+        return Err(SocialError::RateLimited("hn"));
+    }
+    Ok(response.error_for_status()?.text().await?)
+}
+
+/// `GET /search?query=<url>&restrictSearchableAttributes=url` → best hit (§3.4).
+///
+/// Returns `None` when HN has no submission for this URL.
+pub async fn search_by_url(
+    http: &reqwest::Client,
+    canonical_url: &str,
+    article_id: ArticleId,
+) -> Result<Option<SocialRef>, SocialError> {
+    let body = get_text(
+        http,
+        SEARCH_URL,
+        &[
+            ("query", canonical_url),
+            ("restrictSearchableAttributes", "url"),
+            ("tags", "story"),
+            ("hitsPerPage", HITS_PER_PAGE),
+        ],
+    )
+    .await?;
+    parse_search_response(&body, canonical_url, article_id, Timestamp::now())
+}
+
+/// `GET /search?tags=story_{id}` → points/comment count for a known story (§3.4).
+///
+/// The `/items/{id}` endpoint carries the whole comment tree; the search endpoint
+/// answers the same question with a fraction of the bytes.
+pub async fn fetch_story(
+    http: &reqwest::Client,
+    object_id: &str,
+    article_id: ArticleId,
+) -> Result<Option<SocialRef>, SocialError> {
+    let tag = format!("story_{object_id}");
+    let body = get_text(
+        http,
+        SEARCH_URL,
+        &[("tags", tag.as_str()), ("hitsPerPage", "1")],
+    )
+    .await?;
+    parse_story_response(&body, article_id, Timestamp::now())
+}
+
+/// Full comment tree for a story (§3.7).
+pub async fn fetch_comments(
+    http: &reqwest::Client,
+    object_id: &str,
+) -> Result<CommentThread, SocialError> {
+    let url = format!("{ITEM_URL}/{object_id}");
+    let body = get_text(http, &url, &[]).await?;
+    parse_item_response(&body)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    const SEARCH: &str = include_str!("../../tests/fixtures/m2_hn_search_by_url.json");
+    const EMPTY: &str = include_str!("../../tests/fixtures/m2_hn_search_empty.json");
+    const ITEM: &str = include_str!("../../tests/fixtures/m2_hn_item.json");
+
+    fn ts() -> Timestamp {
+        "2026-08-15T05:30:00Z".parse().unwrap()
+    }
+
+    #[test]
+    fn comments_url_yields_the_story_id() {
+        assert_eq!(
+            story_id_from_comments_url("https://news.ycombinator.com/item?id=41234567").as_deref(),
+            Some("41234567")
+        );
+        assert_eq!(
+            story_id_from_comments_url("http://news.ycombinator.com/item?id=1&foo=bar").as_deref(),
+            Some("1")
+        );
+        assert_eq!(story_id_from_comments_url("https://lobste.rs/s/abc"), None);
+        assert_eq!(
+            story_id_from_comments_url("https://news.ycombinator.com/newest"),
+            None
+        );
+        assert_eq!(
+            story_id_from_comments_url("https://news.ycombinator.com/item?id=abc"),
+            None
+        );
+        assert_eq!(story_id_from_comments_url(""), None);
+    }
+
+    #[test]
+    fn search_response_picks_the_matching_submission() {
+        let got = parse_search_response(SEARCH, "https://blog.dev/post", 7, ts())
+            .unwrap()
+            .expect("a hit");
+        assert_eq!(got.article_id, 7);
+        assert_eq!(got.source, SocialSource::Hn);
+        assert_eq!(got.item_id.as_deref(), Some("41234567"));
+        assert_eq!(got.score, 342);
+        assert_eq!(got.num_comments, 210);
+        assert_eq!(
+            got.item_url.as_deref(),
+            Some("https://news.ycombinator.com/item?id=41234567")
+        );
+        assert_eq!(got.fetched_at, ts());
+    }
+
+    #[test]
+    fn search_response_falls_back_to_the_top_hit() {
+        // No hit canonicalizes to this URL, so the highest-scoring one wins.
+        let got = parse_search_response(SEARCH, "https://elsewhere.dev/x", 7, ts())
+            .unwrap()
+            .expect("a hit");
+        assert_eq!(got.item_id.as_deref(), Some("41234567"));
+        assert_eq!(got.score, 342);
+    }
+
+    #[test]
+    fn empty_search_response_is_not_an_error() {
+        assert!(
+            parse_search_response(EMPTY, "https://blog.dev/never-submitted", 1, ts())
+                .unwrap()
+                .is_none()
+        );
+        assert!(parse_story_response(EMPTY, 1, ts()).unwrap().is_none());
+    }
+
+    #[test]
+    fn malformed_json_is_reported_not_panicked() {
+        let err = parse_search_response("{not json", "https://x.dev", 1, ts()).unwrap_err();
+        assert!(matches!(
+            err,
+            SocialError::Unexpected { platform: "hn", .. }
+        ));
+    }
+
+    #[test]
+    fn item_response_becomes_a_comment_tree() {
+        let thread = parse_item_response(ITEM).unwrap();
+        assert_eq!(thread.source, SocialSource::Hn);
+        assert_eq!(
+            thread.item_url,
+            "https://news.ycombinator.com/item?id=41234567"
+        );
+        // 5 comment nodes in the fixture (one of them deleted).
+        assert_eq!(thread.total_comments, 5);
+        // The deleted, childless comment is dropped from the render tree.
+        assert_eq!(thread.comments.len(), 2);
+
+        let first = &thread.comments[0];
+        assert_eq!(first.author, "dbnerd");
+        assert_eq!(first.points, Some(88));
+        assert_eq!(first.depth, 0);
+        assert!(first.text_html.contains("page splits"));
+        // <i> is not in the allowlist, its text survives.
+        assert!(!first.text_html.contains("<i>"));
+        assert!(first.text_html.contains("Bookmarked."));
+
+        let reply = &first.children[0];
+        assert_eq!(reply.author, "tylerh");
+        assert_eq!(reply.depth, 1);
+        assert_eq!(reply.children[0].depth, 2);
+        assert_eq!(thread.comments[1].author, "skeptic");
+    }
+}
diff --git a/src/social/lobsters.rs b/src/social/lobsters.rs
new file mode 100644
index 0000000..4e08bce
--- /dev/null
+++ b/src/social/lobsters.rs
@@ -0,0 +1,308 @@
+//! Lobsters via `/s/{id}.json` (spec §3.4, §3.7).
+//!
+//! Lobsters has no public URL-search API, so linkage only works when the entry
+//! arrived through a lobste.rs feed or its `comments_url` points at a story (§7).
+
+use jiff::Timestamp;
+use serde::Deserialize;
+use url::Url;
+
+use super::SocialError;
+use crate::types::{ArticleId, Comment, CommentThread, SocialRef, SocialSource};
+
+pub const STORY_URL_PREFIX: &str = "https://lobste.rs/s/";
+
+// ---------------------------------------------------------------------------
+// Wire types
+// ---------------------------------------------------------------------------
+
+#[derive(Debug, Clone, Deserialize)]
+struct Story {
+    #[serde(default)]
+    short_id: Option<String>,
+    #[serde(default)]
+    short_id_url: Option<String>,
+    #[serde(default)]
+    comments_url: Option<String>,
+    #[serde(default)]
+    score: Option<i64>,
+    #[serde(default)]
+    comment_count: Option<i64>,
+    #[serde(default)]
+    comments: Vec<RawComment>,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct RawComment {
+    #[serde(default)]
+    short_id: Option<String>,
+    #[serde(default)]
+    parent_comment: Option<String>,
+    #[serde(default)]
+    comment: Option<String>,
+    #[serde(default)]
+    score: Option<i64>,
+    #[serde(default)]
+    is_deleted: bool,
+    /// String in the current API; older responses nested it in an object.
+    #[serde(default)]
+    commenting_user: Option<serde_json::Value>,
+}
+
+impl RawComment {
+    fn author(&self) -> String {
+        match &self.commenting_user {
+            Some(serde_json::Value::String(s)) => s.clone(),
+            Some(serde_json::Value::Object(o)) => o
+                .get("username")
+                .and_then(|v| v.as_str())
+                .unwrap_or("[unknown]")
+                .to_string(),
+            _ => "[unknown]".to_string(),
+        }
+    }
+}
+
+// ---------------------------------------------------------------------------
+// Pure parsing (unit-tested against `tests/fixtures/m2_lobsters_story.json`)
+// ---------------------------------------------------------------------------
+
+/// Extract the story id from a `lobste.rs/s/<id>` URL (§3.4).
+pub fn story_id_from_url(url: &str) -> Option<String> {
+    let parsed = Url::parse(url.trim()).ok()?;
+    let host = parsed.host_str()?.to_ascii_lowercase();
+    if host != "lobste.rs" && !host.ends_with(".lobste.rs") {
+        return None;
+    }
+    let mut segments = parsed.path_segments()?;
+    if segments.next()? != "s" {
+        return None;
+    }
+    segments
+        .next()
+        .map(str::to_string)
+        .filter(|id| !id.is_empty() && id.chars().all(|c| c.is_ascii_alphanumeric()))
+}
+
+fn parse_story(body: &str) -> Result<Story, SocialError> {
+    serde_json::from_str(body).map_err(|e| SocialError::Unexpected {
+        platform: "lobsters",
+        detail: e.to_string(),
+    })
+}
+
+/// Turn a `/s/{id}.json` body into a [`SocialRef`] (§3.4).
+pub fn parse_story_response(
+    body: &str,
+    story_id: &str,
+    article_id: ArticleId,
+    fetched_at: Timestamp,
+) -> Result<Option<SocialRef>, SocialError> {
+    let story = parse_story(body)?;
+    let id = story
+        .short_id
+        .clone()
+        .unwrap_or_else(|| story_id.to_string());
+    Ok(Some(SocialRef {
+        article_id,
+        source: SocialSource::Lobsters,
+        item_id: Some(id.clone()),
+        score: story.score.unwrap_or(0),
+        num_comments: story.comment_count.unwrap_or(story.comments.len() as i64),
+        item_url: Some(
+            story
+                .short_id_url
+                .or(story.comments_url)
+                .unwrap_or_else(|| format!("{STORY_URL_PREFIX}{id}")),
+        ),
+        fetched_at,
+    }))
+}
+
+/// Turn the same body's flat `comments` array into a nested tree (§3.7).
+pub fn parse_comments_response(body: &str, story_id: &str) -> Result<CommentThread, SocialError> {
+    let story = parse_story(body)?;
+    let id = story
+        .short_id
+        .clone()
+        .unwrap_or_else(|| story_id.to_string());
+    let item_url = story
+        .short_id_url
+        .clone()
+        .or_else(|| story.comments_url.clone())
+        .unwrap_or_else(|| format!("{STORY_URL_PREFIX}{id}"));
+    let total = story.comment_count.unwrap_or(story.comments.len() as i64);
+    Ok(CommentThread {
+        source: SocialSource::Lobsters,
+        item_url,
+        total_comments: total,
+        comments: build_tree(&story.comments),
+    })
+}
+
+/// Lobsters returns a flat list ordered depth-first with `parent_comment` links.
+fn build_tree(raw: &[RawComment]) -> Vec<Comment> {
+    let mut roots: Vec<Comment> = Vec::new();
+    // Path of `short_id`s from the root to the comment most recently inserted.
+    let mut path: Vec<String> = Vec::new();
+
+    for item in raw {
+        if item.is_deleted {
+            continue;
+        }
+        let text = item.comment.as_deref().unwrap_or("").trim();
+        if text.is_empty() {
+            continue;
+        }
+        let comment = Comment {
+            author: item.author(),
+            points: item.score,
+            text_html: crate::extract::sanitize(text),
+            depth: 0,
+            children: Vec::new(),
+        };
+        let short_id = item.short_id.clone().unwrap_or_default();
+        match item.parent_comment.as_deref() {
+            Some(parent) => {
+                while path.last().is_some_and(|p| p != parent) {
+                    path.pop();
+                }
+                if path.is_empty() {
+                    // Parent was dropped (deleted); promote to a root thread.
+                    roots.push(comment);
+                    path = vec![short_id];
+                    continue;
+                }
+                let depth = path.len();
+                if let Some(node) = descend(&mut roots, &path) {
+                    let mut child = comment;
+                    child.depth = depth;
+                    node.children.push(child);
+                    path.push(short_id);
+                }
+            }
+            None => {
+                roots.push(comment);
+                path = vec![short_id];
+            }
+        }
+    }
+    roots
+}
+
+/// Walk `roots` along the ids in `path`, returning the last node on it.
+fn descend<'a>(roots: &'a mut [Comment], path: &[String]) -> Option<&'a mut Comment> {
+    let mut node = roots.last_mut()?;
+    for _ in 1..path.len() {
+        node = node.children.last_mut()?;
+    }
+    Some(node)
+}
+
+// ---------------------------------------------------------------------------
+// Network
+// ---------------------------------------------------------------------------
+
+async fn get_text(http: &reqwest::Client, story_id: &str) -> Result<String, SocialError> {
+    let url = format!("{STORY_URL_PREFIX}{story_id}.json");
+    let response = http.get(&url).send().await?;
+    if response.status() == reqwest::StatusCode::TOO_MANY_REQUESTS {
+        return Err(SocialError::RateLimited("lobsters"));
+    }
+    Ok(response.error_for_status()?.text().await?)
+}
+
+/// `GET https://lobste.rs/s/{id}.json` → score + comment count (§3.4).
+pub async fn fetch_story(
+    http: &reqwest::Client,
+    story_id: &str,
+    article_id: ArticleId,
+) -> Result<Option<SocialRef>, SocialError> {
+    let body = get_text(http, story_id).await?;
+    parse_story_response(&body, story_id, article_id, Timestamp::now())
+}
+
+/// The same endpoint's `comments` array, as a tree (§3.7).
+pub async fn fetch_comments(
+    http: &reqwest::Client,
+    story_id: &str,
+) -> Result<CommentThread, SocialError> {
+    let body = get_text(http, story_id).await?;
+    parse_comments_response(&body, story_id)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    const STORY: &str = include_str!("../../tests/fixtures/m2_lobsters_story.json");
+
+    fn ts() -> Timestamp {
+        "2026-08-15T05:30:00Z".parse().unwrap()
+    }
+
+    #[test]
+    fn story_ids_come_out_of_lobsters_urls() {
+        assert_eq!(
+            story_id_from_url("https://lobste.rs/s/abcdef/a_deep_dive").as_deref(),
+            Some("abcdef")
+        );
+        assert_eq!(
+            story_id_from_url("https://lobste.rs/s/abcdef").as_deref(),
+            Some("abcdef")
+        );
+        assert_eq!(story_id_from_url("https://lobste.rs/"), None);
+        assert_eq!(story_id_from_url("https://lobste.rs/s/"), None);
+        assert_eq!(
+            story_id_from_url("https://news.ycombinator.com/item?id=1"),
+            None
+        );
+        assert_eq!(story_id_from_url("garbage"), None);
+    }
+
+    #[test]
+    fn story_response_gives_score_and_comment_count() {
+        let got = parse_story_response(STORY, "abcdef", 9, ts())
+            .unwrap()
+            .expect("a story");
+        assert_eq!(got.article_id, 9);
+        assert_eq!(got.source, SocialSource::Lobsters);
+        assert_eq!(got.item_id.as_deref(), Some("abcdef"));
+        assert_eq!(got.score, 78);
+        assert_eq!(got.num_comments, 4);
+        assert_eq!(got.item_url.as_deref(), Some("https://lobste.rs/s/abcdef"));
+    }
+
+    #[test]
+    fn flat_comments_become_a_tree() {
+        let thread = parse_comments_response(STORY, "abcdef").unwrap();
+        assert_eq!(thread.source, SocialSource::Lobsters);
+        assert_eq!(thread.total_comments, 4);
+        // Two top-level threads; the deleted reply is dropped.
+        assert_eq!(thread.comments.len(), 2);
+
+        let first = &thread.comments[0];
+        assert_eq!(first.author, "bob");
+        assert_eq!(first.points, Some(21));
+        assert_eq!(first.depth, 0);
+        assert_eq!(first.children.len(), 1);
+        assert_eq!(first.children[0].author, "carol");
+        assert_eq!(first.children[0].depth, 1);
+        assert!(first.children[0].text_html.contains("tight too"));
+
+        let second = &thread.comments[1];
+        assert_eq!(second.author, "dave");
+        assert!(second.children.is_empty());
+    }
+
+    #[test]
+    fn malformed_json_is_reported_not_panicked() {
+        assert!(matches!(
+            parse_story_response("nope", "abcdef", 1, ts()).unwrap_err(),
+            SocialError::Unexpected {
+                platform: "lobsters",
+                ..
+            }
+        ));
+    }
+}
diff --git a/src/social/mod.rs b/src/social/mod.rs
new file mode 100644
index 0000000..d663533
--- /dev/null
+++ b/src/social/mod.rs
@@ -0,0 +1,455 @@
+//! Social-proof enrichment (spec §3.4).
+//!
+//! For every deduped article, look up HackerNews (Algolia), Lobsters and Reddit
+//! in parallel behind a semaphore, caching results in the `social` table. Every
+//! lookup is best-effort: failures never fail the run (notes §3).
+
+pub mod hn;
+pub mod lobsters;
+pub mod reddit;
+
+use std::sync::Arc;
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::time::Duration;
+
+use futures::StreamExt;
+use jiff::Timestamp;
+use tokio::sync::{Mutex, Semaphore};
+
+use crate::db::Db;
+use crate::types::{Article, ArticleId, SocialRef, SocialSource, SourceKind};
+
+/// Concurrent social lookups (§3.4).
+pub const CONCURRENCY: usize = 8;
+/// Reddit pacing: roughly one request per second (§3.4).
+pub const REDDIT_MIN_INTERVAL_MS: u64 = 1000;
+/// Cached rows younger than this are reused instead of re-fetched (§3.4).
+pub const CACHE_TTL_HOURS: i64 = 24;
+
+#[derive(Debug, thiserror::Error)]
+pub enum SocialError {
+    #[error("http error: {0}")]
+    Http(#[from] reqwest::Error),
+    #[error("unexpected response from {platform}: {detail}")]
+    Unexpected {
+        platform: &'static str,
+        detail: String,
+    },
+    #[error("rate limited by {0}")]
+    RateLimited(&'static str),
+}
+
+/// Serializes a platform's requests to at most one per `interval` (§3.4 Reddit).
+#[derive(Debug, Clone)]
+struct Pacer {
+    last: Arc<Mutex<Option<tokio::time::Instant>>>,
+    interval: Duration,
+}
+
+impl Pacer {
+    fn new(interval: Duration) -> Self {
+        Self {
+            last: Arc::new(Mutex::new(None)),
+            interval,
+        }
+    }
+
+    /// Block until the caller may issue the next request.
+    async fn tick(&self) {
+        let mut last = self.last.lock().await;
+        if let Some(previous) = *last {
+            let elapsed = previous.elapsed();
+            if elapsed < self.interval {
+                tokio::time::sleep(self.interval - elapsed).await;
+            }
+        }
+        *last = Some(tokio::time::Instant::now());
+    }
+}
+
+/// The identifiers one article needs for its three lookups (§3.4).
+#[derive(Debug, Clone)]
+struct Lookup {
+    article_id: ArticleId,
+    canonical_url: String,
+    /// HN story id from `comments_url`, when the feed handed us one.
+    hn_story_id: Option<String>,
+    /// Lobsters story id — only available for lobste.rs-originated entries (§7).
+    lobsters_story_id: Option<String>,
+}
+
+impl Lookup {
+    fn for_article(article: &Article) -> Self {
+        let comments_url = article.comments_url.as_deref().unwrap_or("");
+        let hn_story_id = hn::story_id_from_comments_url(comments_url);
+
+        // Lobsters linkage requires a lobste.rs origin: either the feed itself or
+        // a comments URL pointing at a story (§3.4, §7).
+        let via_lobsters = article.came_via(SourceKind::Lobsters);
+        let lobsters_story_id = lobsters::story_id_from_url(comments_url).or_else(|| {
+            via_lobsters
+                .then(|| lobsters::story_id_from_url(&article.url))
+                .flatten()
+        });
+
+        Self {
+            article_id: article.id,
+            canonical_url: article.canonical_url.clone(),
+            hn_story_id,
+            lobsters_story_id,
+        }
+    }
+}
+
+/// Orchestrates the per-platform clients and the `social` cache (§3.4).
+#[derive(Debug, Clone)]
+pub struct SocialEnricher {
+    http: reqwest::Client,
+    db: Db,
+    reddit_pacer: Pacer,
+    /// Set once Reddit 429s: the rest of the run skips Reddit entirely (§3.4).
+    reddit_blocked: Arc<AtomicBool>,
+}
+
+impl SocialEnricher {
+    pub fn new(http: reqwest::Client, db: Db) -> Self {
+        Self {
+            http,
+            db,
+            reddit_pacer: Pacer::new(Duration::from_millis(REDDIT_MIN_INTERVAL_MS)),
+            reddit_blocked: Arc::new(AtomicBool::new(false)),
+        }
+    }
+
+    /// Enrich every article in place, writing hits to the `social` table (§3.4).
+    ///
+    /// Returns the number of articles for which at least one platform had a hit.
+    pub async fn enrich_all(&self, articles: &mut [Article]) -> usize {
+        self.run(articles, false).await
+    }
+
+    /// [`Self::enrich_all`] ignoring the cache — used by `backfill-social` (§2).
+    pub async fn refresh_all(&self, articles: &mut [Article]) -> usize {
+        self.run(articles, true).await
+    }
+
+    async fn run(&self, articles: &mut [Article], force: bool) -> usize {
+        let span = tracing::info_span!("social", articles = articles.len(), force);
+        let _guard = span.enter();
+
+        let lookups: Vec<Lookup> = articles.iter().map(Lookup::for_article).collect();
+        let semaphore = Arc::new(Semaphore::new(CONCURRENCY));
+        let results: Vec<(usize, Vec<SocialRef>)> =
+            futures::stream::iter(lookups.iter().enumerate())
+                .map(|(i, lookup)| {
+                    let semaphore = Arc::clone(&semaphore);
+                    async move {
+                        // A closed semaphore is impossible here; treat it as "no limit".
+                        let _permit = semaphore.acquire().await.ok();
+                        (i, self.lookup(lookup, force).await)
+                    }
+                })
+                .buffer_unordered(CONCURRENCY)
+                .collect()
+                .await;
+
+        let mut hits = 0;
+        for (i, refs) in results {
+            if !refs.is_empty() {
+                hits += 1;
+            }
+            articles[i].social = refs;
+        }
+        tracing::info!(hits, "social enrichment complete");
+        hits
+    }
+
+    /// Look up every platform for one article, honoring the cache TTL (§3.4).
+    pub async fn enrich_one(&self, article: &Article) -> Vec<SocialRef> {
+        self.lookup(&Lookup::for_article(article), false).await
+    }
+
+    async fn lookup(&self, target: &Lookup, force: bool) -> Vec<SocialRef> {
+        let mut refs: Vec<SocialRef> = if force || target.article_id == 0 {
+            Vec::new()
+        } else {
+            cached_refs(&self.db, target.article_id).await
+        };
+        let cached = refs.len();
+
+        if !refs.iter().any(|r| r.source == SocialSource::Hn)
+            && let Some(found) = self.lookup_hn(target).await
+        {
+            refs.push(found);
+        }
+        if !refs.iter().any(|r| r.source == SocialSource::Lobsters)
+            && let Some(found) = self.lookup_lobsters(target).await
+        {
+            refs.push(found);
+        }
+        if !refs.iter().any(|r| r.source == SocialSource::Reddit)
+            && let Some(found) = self.lookup_reddit(target).await
+        {
+            refs.push(found);
+        }
+
+        // Persist only what we just fetched; cached rows are already stored.
+        if target.article_id != 0 {
+            for r in refs.iter().skip(cached) {
+                if let Err(e) = self.db.upsert_social(r).await {
+                    tracing::warn!(
+                        article = target.article_id,
+                        "storing social ref failed: {e}"
+                    );
+                }
+            }
+        }
+        refs.sort_by_key(|r| r.source);
+        refs
+    }
+
+    async fn lookup_hn(&self, target: &Lookup) -> Option<SocialRef> {
+        let result = match &target.hn_story_id {
+            Some(id) => hn::fetch_story(&self.http, id, target.article_id).await,
+            None => hn::search_by_url(&self.http, &target.canonical_url, target.article_id).await,
+        };
+        best_effort("hn", &target.canonical_url, result)
+    }
+
+    async fn lookup_lobsters(&self, target: &Lookup) -> Option<SocialRef> {
+        let id = target.lobsters_story_id.as_deref()?;
+        let result = lobsters::fetch_story(&self.http, id, target.article_id).await;
+        best_effort("lobsters", &target.canonical_url, result)
+    }
+
+    async fn lookup_reddit(&self, target: &Lookup) -> Option<SocialRef> {
+        if self.reddit_blocked.load(Ordering::Relaxed) {
+            return None;
+        }
+        self.reddit_pacer.tick().await;
+        let result =
+            reddit::lookup_by_url(&self.http, &target.canonical_url, target.article_id).await;
+        if matches!(result, Err(SocialError::RateLimited(_))) {
+            // Back off for the rest of the run: social data is best-effort (§3.4).
+            self.reddit_blocked.store(true, Ordering::Relaxed);
+            tracing::warn!("reddit rate-limited us; skipping reddit for the rest of this run");
+            return None;
+        }
+        best_effort("reddit", &target.canonical_url, result)
+    }
+
+    /// Re-poll recent articles' social scores (`daily-epub backfill-social`, §2).
+    pub async fn backfill(&self, days: u32) -> anyhow::Result<usize> {
+        let span = tracing::info_span!("backfill_social", days);
+        let _guard = span.enter();
+
+        let cutoff = Timestamp::now() - jiff::Span::new().hours(24 * i64::from(days.max(1)));
+        let rows = sqlx::query_scalar::<_, i64>(
+            "SELECT id FROM articles WHERE first_seen >= ? ORDER BY first_seen DESC",
+        )
+        .bind(crate::db::fmt_ts(cutoff))
+        .fetch_all(self.db.pool())
+        .await?;
+
+        let mut articles: Vec<Article> = Vec::with_capacity(rows.len());
+        for id in rows {
+            match self.db.get_article(id).await {
+                Ok(Some(article)) => articles.push(article),
+                Ok(None) => {}
+                Err(e) => tracing::warn!(article = id, "loading article failed: {e}"),
+            }
+        }
+        tracing::info!(articles = articles.len(), "re-polling social scores");
+        Ok(self.refresh_all(&mut articles).await)
+    }
+}
+
+/// Log-and-drop wrapper: no social lookup may ever fail the run (notes §3).
+fn best_effort(
+    platform: &'static str,
+    url: &str,
+    result: Result<Option<SocialRef>, SocialError>,
+) -> Option<SocialRef> {
+    match result {
+        Ok(found) => found,
+        Err(e) => {
+            tracing::debug!(platform, url, "social lookup failed: {e}");
+            None
+        }
+    }
+}
+
+/// Load cached refs for an article, ignoring rows older than [`CACHE_TTL_HOURS`].
+pub async fn cached_refs(db: &Db, article_id: ArticleId) -> Vec<SocialRef> {
+    match db.social_for_article(article_id).await {
+        Ok(refs) => {
+            let now = Timestamp::now();
+            refs.into_iter().filter(|r| is_fresh(r, now)).collect()
+        }
+        Err(e) => {
+            tracing::warn!(article = article_id, "reading social cache failed: {e}");
+            Vec::new()
+        }
+    }
+}
+
+/// True while a cached row is younger than [`CACHE_TTL_HOURS`] (§3.4).
+pub fn is_fresh(social_ref: &SocialRef, now: Timestamp) -> bool {
+    // A negative age (clock skew, a row written moments ago) is fresh too.
+    now.as_second() - social_ref.fetched_at.as_second() < CACHE_TTL_HOURS * 3600
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::types::{ExtractMethod, SourceRef};
+
+    fn ts(s: &str) -> Timestamp {
+        s.parse().unwrap()
+    }
+
+    fn article(url: &str) -> Article {
+        Article {
+            id: 1,
+            canonical_url: url.into(),
+            title: "T".into(),
+            best_entry_id: 1,
+            content_html: "<p>x</p>".into(),
+            word_count: 1,
+            excerpt_only: false,
+            image_count: 0,
+            sources: vec![SourceRef {
+                entry_id: 1,
+                feed_id: 1,
+                feed_title: "Feed".into(),
+                category: None,
+                kind: SourceKind::Feed,
+            }],
+            first_seen: ts("2026-08-15T05:00:00Z"),
+            url: url.into(),
+            author: None,
+            feed_id: 1,
+            feed_title: "Feed".into(),
+            category: None,
+            published_at: None,
+            comments_url: None,
+            image_urls: vec![],
+            social: vec![],
+            extract_method: ExtractMethod::Miniflux,
+        }
+    }
+
+    fn social(source: SocialSource, fetched_at: Timestamp) -> SocialRef {
+        SocialRef {
+            article_id: 1,
+            source,
+            item_id: Some("1".into()),
+            score: 10,
+            num_comments: 5,
+            item_url: None,
+            fetched_at,
+        }
+    }
+
+    #[test]
+    fn cache_freshness_window() {
+        let now = ts("2026-08-15T12:00:00Z");
+        assert!(is_fresh(&social(SocialSource::Hn, now), now));
+        assert!(is_fresh(
+            &social(SocialSource::Hn, ts("2026-08-14T13:00:00Z")),
+            now
+        ));
+        assert!(!is_fresh(
+            &social(SocialSource::Hn, ts("2026-08-14T11:00:00Z")),
+            now
+        ));
+        // Clock skew (a row from the future) counts as fresh, never as ancient.
+        assert!(is_fresh(
+            &social(SocialSource::Hn, ts("2026-08-15T13:00:00Z")),
+            now
+        ));
+    }
+
+    #[test]
+    fn lookup_targets_come_from_comments_urls_and_sources() {
+        let mut a = article("https://blog.dev/post");
+        a.comments_url = Some("https://news.ycombinator.com/item?id=41234567".into());
+        let l = Lookup::for_article(&a);
+        assert_eq!(l.hn_story_id.as_deref(), Some("41234567"));
+        assert_eq!(l.lobsters_story_id, None);
+        assert_eq!(l.canonical_url, "https://blog.dev/post");
+
+        a.comments_url = Some("https://lobste.rs/s/abcdef/a_deep_dive".into());
+        let l = Lookup::for_article(&a);
+        assert_eq!(l.hn_story_id, None);
+        assert_eq!(l.lobsters_story_id.as_deref(), Some("abcdef"));
+
+        // No comments URL and no lobsters origin: no lobsters lookup at all (§7).
+        a.comments_url = None;
+        assert_eq!(Lookup::for_article(&a).lobsters_story_id, None);
+
+        // Lobsters-origin entry whose URL is the story itself.
+        a.url = "https://lobste.rs/s/zzzzzz/title".into();
+        a.sources[0].kind = SourceKind::Lobsters;
+        assert_eq!(
+            Lookup::for_article(&a).lobsters_story_id.as_deref(),
+            Some("zzzzzz")
+        );
+    }
+
+    #[tokio::test]
+    async fn pacer_serializes_requests() {
+        let pacer = Pacer::new(Duration::from_millis(30));
+        let started = std::time::Instant::now();
+        pacer.tick().await;
+        pacer.tick().await;
+        assert!(started.elapsed() >= Duration::from_millis(30));
+    }
+
+    #[tokio::test]
+    async fn cache_reads_skip_stale_rows() {
+        let dir = tempfile::tempdir().unwrap();
+        let db = Db::open_and_migrate(&dir.path().join("t.db"))
+            .await
+            .unwrap();
+        db.upsert_entry(&crate::types::Entry {
+            id: 1,
+            feed_id: 1,
+            feed_title: Some("Feed".into()),
+            category: None,
+            title: "T".into(),
+            url: "https://blog.dev/post".into(),
+            canonical_url: Some("https://blog.dev/post".into()),
+            author: None,
+            published_at: None,
+            comments_url: None,
+            raw_content: "<p>x</p>".into(),
+            fetched_at: Timestamp::now(),
+        })
+        .await
+        .unwrap();
+        let id = db
+            .upsert_article(&article("https://blog.dev/post"))
+            .await
+            .unwrap();
+
+        db.upsert_social(&SocialRef {
+            article_id: id,
+            fetched_at: Timestamp::now(),
+            ..social(SocialSource::Hn, Timestamp::now())
+        })
+        .await
+        .unwrap();
+        db.upsert_social(&SocialRef {
+            article_id: id,
+            fetched_at: Timestamp::now() - jiff::Span::new().hours(48),
+            ..social(SocialSource::Reddit, Timestamp::now())
+        })
+        .await
+        .unwrap();
+
+        let fresh = cached_refs(&db, id).await;
+        assert_eq!(fresh.len(), 1);
+        assert_eq!(fresh[0].source, SocialSource::Hn);
+    }
+}
diff --git a/src/social/reddit.rs b/src/social/reddit.rs
new file mode 100644
index 0000000..9f18ac4
--- /dev/null
+++ b/src/social/reddit.rs
@@ -0,0 +1,322 @@
+//! Reddit via the public JSON endpoints (spec §3.4, §3.7).
+//!
+//! Requires the descriptive User-Agent from [`crate::http::USER_AGENT`], ~1 req/s
+//! pacing, and must degrade gracefully on 429 (social data is best-effort).
+
+use jiff::Timestamp;
+use serde::Deserialize;
+
+use super::SocialError;
+use crate::types::{ArticleId, Comment, CommentThread, SocialRef, SocialSource};
+
+/// `GET /api/info.json?url=…` — finds submissions of a given URL (§3.4).
+pub const INFO_URL: &str = "https://www.reddit.com/api/info.json";
+pub const BASE_URL: &str = "https://www.reddit.com";
+
+// ---------------------------------------------------------------------------
+// Wire types
+// ---------------------------------------------------------------------------
+
+#[derive(Debug, Clone, Deserialize)]
+struct Listing {
+    #[serde(default)]
+    data: ListingData,
+}
+
+#[derive(Debug, Clone, Default, Deserialize)]
+struct ListingData {
+    #[serde(default)]
+    children: Vec<Child>,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct Child {
+    #[serde(default)]
+    kind: String,
+    #[serde(default)]
+    data: serde_json::Value,
+}
+
+/// A `t3` submission (only the fields §3.4 uses).
+#[derive(Debug, Clone, Deserialize)]
+pub struct Post {
+    #[serde(default)]
+    pub name: Option<String>,
+    #[serde(default)]
+    pub id: Option<String>,
+    #[serde(default)]
+    pub title: Option<String>,
+    #[serde(default)]
+    pub score: Option<i64>,
+    #[serde(default)]
+    pub num_comments: Option<i64>,
+    #[serde(default)]
+    pub permalink: Option<String>,
+    #[serde(default)]
+    pub subreddit: Option<String>,
+}
+
+impl Post {
+    /// Absolute link a human can open (§3.4).
+    pub fn item_url(&self) -> Option<String> {
+        self.permalink.as_ref().map(|p| format!("{BASE_URL}{p}"))
+    }
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct RawComment {
+    #[serde(default)]
+    author: Option<String>,
+    #[serde(default)]
+    score: Option<i64>,
+    #[serde(default)]
+    body: Option<String>,
+    #[serde(default)]
+    stickied: bool,
+    #[serde(default)]
+    replies: serde_json::Value,
+}
+
+// ---------------------------------------------------------------------------
+// Pure parsing (unit-tested against `tests/fixtures/reddit_*.json`)
+// ---------------------------------------------------------------------------
+
+/// Every `t3` submission in an `api/info.json` response.
+pub fn parse_posts(body: &str) -> Result<Vec<Post>, SocialError> {
+    let listing: Listing = serde_json::from_str(body).map_err(|e| SocialError::Unexpected {
+        platform: "reddit",
+        detail: e.to_string(),
+    })?;
+    Ok(listing
+        .data
+        .children
+        .into_iter()
+        .filter(|c| c.kind == "t3")
+        .filter_map(|c| serde_json::from_value::<Post>(c.data).ok())
+        .collect())
+}
+
+/// Best (highest score) submission in an `api/info.json` response (§3.4).
+pub fn parse_info_response(
+    body: &str,
+    article_id: ArticleId,
+    fetched_at: Timestamp,
+) -> Result<Option<SocialRef>, SocialError> {
+    let posts = parse_posts(body)?;
+    let Some(best) = posts.into_iter().max_by_key(|p| p.score.unwrap_or(0)) else {
+        return Ok(None);
+    };
+    Ok(Some(SocialRef {
+        article_id,
+        source: SocialSource::Reddit,
+        item_id: best.name.clone().or_else(|| best.id.clone()),
+        score: best.score.unwrap_or(0),
+        num_comments: best.num_comments.unwrap_or(0),
+        item_url: best.item_url(),
+        fetched_at,
+    }))
+}
+
+/// Parse a `{permalink}.json` body — `[post listing, comment listing]` (§3.7).
+pub fn parse_comments_response(body: &str, permalink: &str) -> Result<CommentThread, SocialError> {
+    let listings: Vec<Listing> =
+        serde_json::from_str(body).map_err(|e| SocialError::Unexpected {
+            platform: "reddit",
+            detail: e.to_string(),
+        })?;
+    let total = listings
+        .first()
+        .and_then(|l| l.data.children.first())
+        .and_then(|c| serde_json::from_value::<Post>(c.data.clone()).ok())
+        .and_then(|p| p.num_comments)
+        .unwrap_or(0);
+    let comments = listings
+        .get(1)
+        .map(|l| map_children(&l.data.children, 0))
+        .unwrap_or_default();
+    Ok(CommentThread {
+        source: SocialSource::Reddit,
+        item_url: format!("{BASE_URL}{permalink}"),
+        total_comments: total,
+        comments,
+    })
+}
+
+fn map_children(children: &[Child], depth: usize) -> Vec<Comment> {
+    children
+        .iter()
+        .filter(|c| c.kind == "t1")
+        .filter_map(|c| serde_json::from_value::<RawComment>(c.data.clone()).ok())
+        .filter(|c| !c.stickied)
+        .filter_map(|raw| {
+            let body = raw.body.as_deref().unwrap_or("").trim().to_string();
+            if body.is_empty() || body == "[removed]" || body == "[deleted]" {
+                return None;
+            }
+            let kids = match serde_json::from_value::<Listing>(raw.replies.clone()) {
+                Ok(listing) => map_children(&listing.data.children, depth + 1),
+                // `replies` is `""` when a comment has none.
+                Err(_) => Vec::new(),
+            };
+            Some(Comment {
+                author: raw.author.clone().unwrap_or_else(|| "[deleted]".into()),
+                points: raw.score,
+                text_html: crate::extract::sanitize(&markdown_to_html(&body)),
+                depth,
+                children: kids,
+            })
+        })
+        .collect()
+}
+
+/// Reddit comment bodies are markdown; the EPUB only needs paragraphs (§3.7).
+fn markdown_to_html(body: &str) -> String {
+    body.split("\n\n")
+        .map(str::trim)
+        .filter(|p| !p.is_empty())
+        .map(|p| format!("<p>{}</p>", escape_text(p)))
+        .collect()
+}
+
+fn escape_text(s: &str) -> String {
+    s.replace('&', "&amp;")
+        .replace('<', "&lt;")
+        .replace('>', "&gt;")
+}
+
+// ---------------------------------------------------------------------------
+// Network
+// ---------------------------------------------------------------------------
+
+async fn get_text(
+    http: &reqwest::Client,
+    url: &str,
+    query: &[(&str, &str)],
+) -> Result<String, SocialError> {
+    let response = http
+        .get(url)
+        .header(reqwest::header::USER_AGENT, crate::http::USER_AGENT)
+        .query(query)
+        .send()
+        .await?;
+    let status = response.status();
+    if status == reqwest::StatusCode::TOO_MANY_REQUESTS || status.as_u16() == 403 {
+        return Err(SocialError::RateLimited("reddit"));
+    }
+    Ok(response.error_for_status()?.text().await?)
+}
+
+/// Best (highest score) Reddit post for `canonical_url` (§3.4).
+///
+/// Returns `None` when no submission exists or the API rate-limited us.
+pub async fn lookup_by_url(
+    http: &reqwest::Client,
+    canonical_url: &str,
+    article_id: ArticleId,
+) -> Result<Option<SocialRef>, SocialError> {
+    let body = get_text(http, INFO_URL, &[("url", canonical_url), ("raw_json", "1")]).await?;
+    parse_info_response(&body, article_id, Timestamp::now())
+}
+
+/// `GET {permalink}.json?limit=100&depth=3&sort=top` → comment tree (§3.7).
+pub async fn fetch_comments(
+    http: &reqwest::Client,
+    permalink: &str,
+) -> Result<CommentThread, SocialError> {
+    let path = permalink.trim_end_matches('/');
+    let url = format!("{BASE_URL}{path}.json");
+    let body = get_text(
+        http,
+        &url,
+        &[
+            ("limit", "100"),
+            ("depth", "3"),
+            ("sort", "top"),
+            ("raw_json", "1"),
+        ],
+    )
+    .await?;
+    parse_comments_response(&body, permalink)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    const INFO: &str = include_str!("../../tests/fixtures/m2_reddit_info.json");
+    const INFO_EMPTY: &str = include_str!("../../tests/fixtures/m2_reddit_info_empty.json");
+    const COMMENTS: &str = include_str!("../../tests/fixtures/m2_reddit_comments.json");
+
+    fn ts() -> Timestamp {
+        "2026-08-15T05:30:00Z".parse().unwrap()
+    }
+
+    #[test]
+    fn info_response_picks_the_highest_scoring_post() {
+        let got = parse_info_response(INFO, 11, ts())
+            .unwrap()
+            .expect("a post");
+        assert_eq!(got.article_id, 11);
+        assert_eq!(got.source, SocialSource::Reddit);
+        assert_eq!(got.item_id.as_deref(), Some("t3_1abcd2"));
+        assert_eq!(got.score, 845);
+        assert_eq!(got.num_comments, 231);
+        assert_eq!(
+            got.item_url.as_deref(),
+            Some("https://www.reddit.com/r/programming/comments/1abcd2/a_deep_dive_into_btrees/")
+        );
+        assert_eq!(parse_posts(INFO).unwrap().len(), 3);
+    }
+
+    #[test]
+    fn empty_info_response_is_not_an_error() {
+        assert!(parse_info_response(INFO_EMPTY, 1, ts()).unwrap().is_none());
+    }
+
+    #[test]
+    fn malformed_json_is_reported_not_panicked() {
+        assert!(matches!(
+            parse_info_response("<html>rate limited</html>", 1, ts()).unwrap_err(),
+            SocialError::Unexpected {
+                platform: "reddit",
+                ..
+            }
+        ));
+    }
+
+    #[test]
+    fn comment_listing_becomes_a_tree() {
+        let thread =
+            parse_comments_response(COMMENTS, "/r/programming/comments/1abcd2/x/").unwrap();
+        assert_eq!(thread.source, SocialSource::Reddit);
+        assert_eq!(thread.total_comments, 231);
+        assert_eq!(
+            thread.item_url,
+            "https://www.reddit.com/r/programming/comments/1abcd2/x/"
+        );
+        // `more` stubs, the stickied automod post and the removed comment are dropped.
+        assert_eq!(thread.comments.len(), 1);
+
+        let top = &thread.comments[0];
+        assert_eq!(top.author, "index_nerd");
+        assert_eq!(top.points, Some(412));
+        assert_eq!(top.depth, 0);
+        assert!(
+            top.text_html
+                .starts_with("<p>Fan-out is the whole ballgame")
+        );
+        assert_eq!(top.children.len(), 1);
+        assert_eq!(top.children[0].author, "pagecache");
+        assert_eq!(top.children[0].depth, 1);
+    }
+
+    #[test]
+    fn comment_bodies_are_escaped_into_paragraphs() {
+        let html = markdown_to_html("first & <b>bold</b>\n\nsecond");
+        assert_eq!(
+            html,
+            "<p>first &amp; &lt;b&gt;bold&lt;/b&gt;</p><p>second</p>"
+        );
+        assert!(!crate::extract::sanitize(&html).contains("<b>"));
+    }
+}
diff --git a/src/types.rs b/src/types.rs
new file mode 100644
index 0000000..145bbef
--- /dev/null
+++ b/src/types.rs
@@ -0,0 +1,702 @@
+//! Shared domain types — the contract between pipeline stages (spec §2, §3.13).
+//!
+//! Every stage module (`dedupe`, `extract`, `social`, `curate`, `comments`, `epub`,
+//! `publish`, `server`, `world`) codes against the types defined here so that the
+//! stages can be implemented independently. Keep this module free of I/O.
+
+use std::collections::BTreeMap;
+use std::fmt;
+use std::path::PathBuf;
+
+use jiff::Timestamp;
+use jiff::civil::Date;
+use serde::{Deserialize, Serialize};
+
+/// Miniflux entry id (also our `entries.id`).
+pub type EntryId = i64;
+/// Row id of a deduped article cluster (`articles.id`).
+pub type ArticleId = i64;
+/// Miniflux feed id.
+pub type FeedId = i64;
+
+// ---------------------------------------------------------------------------
+// Ingest (§3.1)
+// ---------------------------------------------------------------------------
+
+/// A raw Miniflux entry as persisted in the `entries` table (§3.1, §3.13).
+///
+/// `canonical_url` is `None` at ingest time; the dedupe stage
+/// ([`crate::dedupe::canonical_url`], §3.2) fills it in.
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Entry {
+    pub id: EntryId,
+    pub feed_id: FeedId,
+    pub feed_title: Option<String>,
+    pub category: Option<String>,
+    pub title: String,
+    pub url: String,
+    pub canonical_url: Option<String>,
+    pub author: Option<String>,
+    pub published_at: Option<Timestamp>,
+    pub comments_url: Option<String>,
+    pub raw_content: String,
+    pub fetched_at: Timestamp,
+}
+
+/// Where an article reached us from — a curation signal in its own right (§3.2, §3.5).
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum SourceKind {
+    /// Arrived via a Scour interest feed — it already matched a stated interest.
+    Scour,
+    /// Arrived via the Hacker News frontpage feed (hnrss et al).
+    HnFrontpage,
+    /// Arrived via a lobste.rs feed.
+    Lobsters,
+    /// Arrived via a Reddit feed.
+    Reddit,
+    /// A plain blog/publication feed.
+    Feed,
+}
+
+/// One feed that carried this story; an article cluster keeps the union of them (§3.2).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct SourceRef {
+    pub entry_id: EntryId,
+    pub feed_id: FeedId,
+    pub feed_title: String,
+    pub category: Option<String>,
+    pub kind: SourceKind,
+}
+
+// ---------------------------------------------------------------------------
+// Dedupe + extraction (§3.2, §3.3)
+// ---------------------------------------------------------------------------
+
+/// How an article's body text was obtained (§3.3).
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum ExtractMethod {
+    /// Miniflux's stored content already looked like full text.
+    Miniflux,
+    /// Fetched the article URL and ran readability over it.
+    Readability,
+    /// Only a feed summary/excerpt was available.
+    Excerpt,
+}
+
+/// Result of the content-extraction stage for one article (§3.3).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Extracted {
+    /// Sanitized XHTML-safe body markup.
+    pub content_html: String,
+    pub word_count: i64,
+    /// True when we only have an excerpt/paywall stub — penalized in pre-filter.
+    pub excerpt_only: bool,
+    /// Absolute image URLs referenced by the body, capped at 12 (§3.3).
+    pub image_urls: Vec<String>,
+    pub method: ExtractMethod,
+}
+
+/// A deduped story cluster: the unit everything downstream operates on (§3.2).
+///
+/// Persisted fields map to the `articles` table; the remaining fields are
+/// denormalized from the best entry / `social` table for convenience and are
+/// re-hydrated by [`crate::db`] when an article is loaded.
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Article {
+    /// Zero until the row has been inserted.
+    pub id: ArticleId,
+    pub canonical_url: String,
+    pub title: String,
+    /// The entry whose content we kept (the richest one).
+    pub best_entry_id: EntryId,
+    pub content_html: String,
+    pub word_count: i64,
+    pub excerpt_only: bool,
+    pub image_count: i64,
+    /// Union of the feeds that carried this story (`articles.sources_json`).
+    pub sources: Vec<SourceRef>,
+    pub first_seen: Timestamp,
+
+    // --- denormalized, not stored on `articles` ---
+    pub url: String,
+    pub author: Option<String>,
+    pub feed_id: FeedId,
+    pub feed_title: String,
+    pub category: Option<String>,
+    pub published_at: Option<Timestamp>,
+    pub comments_url: Option<String>,
+    pub image_urls: Vec<String>,
+    pub social: Vec<SocialRef>,
+    pub extract_method: ExtractMethod,
+}
+
+impl Article {
+    /// Estimated reading time at 220 wpm, minimum one minute (§3.10).
+    pub fn reading_minutes(&self) -> i64 {
+        reading_minutes(self.word_count)
+    }
+
+    /// Composite social proof across all sources (§3.4).
+    pub fn social_score(&self) -> f64 {
+        composite_social_score(&self.social)
+    }
+
+    /// True when this story arrived via a feed of the given kind (§3.5).
+    pub fn came_via(&self, kind: SourceKind) -> bool {
+        self.sources.iter().any(|s| s.kind == kind)
+    }
+
+    /// Stable EPUB chapter id used by TOC and rating links (implementation notes §12).
+    pub fn chapter_id(&self) -> String {
+        format!("art-{}", self.best_entry_id)
+    }
+}
+
+/// Estimated reading time at 220 wpm, minimum one minute.
+pub fn reading_minutes(word_count: i64) -> i64 {
+    (word_count.max(0) as f64 / 220.0).ceil().max(1.0) as i64
+}
+
+// ---------------------------------------------------------------------------
+// Social proof (§3.4)
+// ---------------------------------------------------------------------------
+
+/// Social platforms we look up. `X` is reserved: no free API today (§3.4, §7).
+#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord, Serialize, Deserialize)]
+#[serde(rename_all = "lowercase")]
+pub enum SocialSource {
+    Hn,
+    Lobsters,
+    Reddit,
+    X,
+}
+
+impl SocialSource {
+    /// Value stored in `social.source` (matches the CHECK constraint).
+    pub fn as_str(self) -> &'static str {
+        match self {
+            SocialSource::Hn => "hn",
+            SocialSource::Lobsters => "lobsters",
+            SocialSource::Reddit => "reddit",
+            SocialSource::X => "x",
+        }
+    }
+
+    /// Human-readable label used in chapter titles and stat lines (§3.7, §3.10).
+    pub fn display_name(self) -> &'static str {
+        match self {
+            SocialSource::Hn => "HN",
+            SocialSource::Lobsters => "Lobsters",
+            SocialSource::Reddit => "Reddit",
+            SocialSource::X => "X",
+        }
+    }
+
+    pub fn parse(s: &str) -> Option<Self> {
+        match s {
+            "hn" => Some(SocialSource::Hn),
+            "lobsters" => Some(SocialSource::Lobsters),
+            "reddit" => Some(SocialSource::Reddit),
+            "x" => Some(SocialSource::X),
+            _ => None,
+        }
+    }
+}
+
+impl fmt::Display for SocialSource {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        f.write_str(self.as_str())
+    }
+}
+
+/// A cached social-proof lookup for one article on one platform (`social` table).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct SocialRef {
+    pub article_id: ArticleId,
+    pub source: SocialSource,
+    /// Platform item id: HN `objectID`, lobsters story id, reddit fullname.
+    pub item_id: Option<String>,
+    pub score: i64,
+    pub num_comments: i64,
+    /// Link a human can open (HN item page, lobsters story, reddit permalink).
+    pub item_url: Option<String>,
+    pub fetched_at: Timestamp,
+}
+
+/// `log10(1+hn) + 0.7*log10(1+reddit) + log10(1+lobsters) + 0.5*log10(1+comments)` (§3.4).
+///
+/// Lives here rather than in `social/` because both the pre-filter and the EPUB
+/// stat line need it.
+pub fn composite_social_score(refs: &[SocialRef]) -> f64 {
+    let mut score = 0.0;
+    let mut comments = 0i64;
+    for r in refs {
+        let points = (r.score.max(0)) as f64;
+        let weight = match r.source {
+            SocialSource::Hn | SocialSource::Lobsters => 1.0,
+            SocialSource::Reddit => 0.7,
+            SocialSource::X => 0.0,
+        };
+        score += weight * (1.0 + points).log10();
+        comments += r.num_comments.max(0);
+    }
+    score + 0.5 * (1.0 + comments as f64).log10()
+}
+
+// ---------------------------------------------------------------------------
+// Curation (§3.5, §3.6)
+// ---------------------------------------------------------------------------
+
+/// DeepSeek stage-A output for one article (§3.6).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct LlmScore {
+    /// 0–10.
+    pub score: f64,
+    pub category: String,
+    /// ≤ 20 words.
+    pub rationale: String,
+    #[serde(default)]
+    pub is_paywalled_guess: bool,
+}
+
+/// An article carrying every ranking signal computed so far (§3.5, §3.6).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct ScoredArticle {
+    pub article: Article,
+    /// Heuristic pre-filter score, 0–100 (§3.5).
+    pub prefilter_score: f64,
+    /// Cached [`composite_social_score`] for the article.
+    pub social_score: f64,
+    /// Beta-smoothed per-feed upvote rate applied by the pre-filter (§3.9).
+    pub feed_prior: f64,
+    /// `None` until stage A has run (or when `--skip-llm`).
+    pub llm: Option<LlmScore>,
+    /// From `curation.always_include_feeds`: may be scored but never dropped (§3.5).
+    pub auto_include: bool,
+}
+
+impl ScoredArticle {
+    /// Ranking key for stage B: LLM score weighted with social proof and priors (§3.6).
+    pub fn combined_score(&self) -> f64 {
+        let llm = self.llm.as_ref().map(|l| l.score).unwrap_or(0.0);
+        llm * 10.0 + self.social_score * 4.0 + self.feed_prior * 10.0 + self.prefilter_score * 0.1
+    }
+}
+
+/// One selected article with its section placement (§3.6 stage B).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Pick {
+    pub article: Article,
+    /// One of `curation.sections` (or the reserved `World Briefing`).
+    pub section: String,
+    /// Order within the section, ascending.
+    pub position: i64,
+    pub is_lead: bool,
+    /// Newspaper-abstract summary from stage C; `None` until editorial runs.
+    pub summary: Option<String>,
+    pub llm: Option<LlmScore>,
+    /// Rendered comment chapter, when the article had social refs (§3.7).
+    pub discussion: Option<Discussion>,
+}
+
+/// The day's final lineup: 15–25 picks grouped into sections (§3.6 stage B).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Lineup {
+    pub date: Date,
+    /// Sorted by (section order, position).
+    pub picks: Vec<Pick>,
+    /// Section names in issue order; empty sections are omitted (§3.6).
+    pub section_order: Vec<String>,
+}
+
+impl Lineup {
+    /// Picks belonging to `section`, in position order.
+    pub fn section_picks(&self, section: &str) -> Vec<&Pick> {
+        let mut v: Vec<&Pick> = self.picks.iter().filter(|p| p.section == section).collect();
+        v.sort_by_key(|p| p.position);
+        v
+    }
+
+    pub fn lead(&self) -> Option<&Pick> {
+        self.picks.iter().find(|p| p.is_lead)
+    }
+
+    pub fn total_words(&self) -> i64 {
+        self.picks.iter().map(|p| p.article.word_count).sum()
+    }
+}
+
+/// Stage-C editorial output (§3.6).
+#[derive(Debug, Clone, Default, PartialEq, Serialize, Deserialize)]
+pub struct Editorial {
+    /// "From the Editor", 250–400 words, already sanitized XHTML.
+    pub front_page_html: String,
+    /// Section name → 2–3 sentence intro.
+    pub section_intros: BTreeMap<String, String>,
+    /// Article id → 2–3 sentence newspaper abstract.
+    pub summaries: BTreeMap<ArticleId, String>,
+}
+
+/// The taste profile that forms the DeepSeek system prompt (§3.6, `kv`).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct TasteProfile {
+    /// Full ~600-word prompt document.
+    pub text: String,
+    pub version: i64,
+    pub built_at: Timestamp,
+}
+
+// ---------------------------------------------------------------------------
+// Comments (§3.7)
+// ---------------------------------------------------------------------------
+
+/// One comment node in a discussion tree (§3.7).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Comment {
+    pub author: String,
+    pub points: Option<i64>,
+    /// Sanitized comment body, ellipsized to 1,200 chars.
+    pub text_html: String,
+    /// 0 for top-level; rendering stops at depth 3.
+    pub depth: usize,
+    pub children: Vec<Comment>,
+}
+
+/// The comment tree fetched from one platform for one article (§3.7).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct CommentThread {
+    pub source: SocialSource,
+    pub item_url: String,
+    pub total_comments: i64,
+    /// Top ~8 top-level threads by score.
+    pub comments: Vec<Comment>,
+}
+
+/// A rendered discussion chapter: one per article, HN → Lobsters → Reddit (§3.7).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Discussion {
+    pub article_id: ArticleId,
+    /// Chapter id, `disc-{entry_id}` (implementation notes §12).
+    pub chapter_id: String,
+    pub threads: Vec<CommentThread>,
+}
+
+impl Discussion {
+    pub fn total_comments(&self) -> i64 {
+        self.threads.iter().map(|t| t.total_comments).sum()
+    }
+}
+
+// ---------------------------------------------------------------------------
+// World briefing (§3.8)
+// ---------------------------------------------------------------------------
+
+/// Wikipedia Current Events portal digest for one day (§3.8).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct WorldBriefing {
+    pub date: Date,
+    /// Portal URL the content came from (also used for CC BY-SA attribution).
+    pub source_url: String,
+    /// Sanitized `<ul>`-style markup of the day's events.
+    pub body_html: String,
+}
+
+/// Reserved section name for [`WorldBriefing`] — never offered to the LLM (§3.6).
+pub const WORLD_BRIEFING_SECTION: &str = "World Briefing";
+
+// ---------------------------------------------------------------------------
+// Issue assembly (§3.10)
+// ---------------------------------------------------------------------------
+
+/// Which of the two editions is being built (§3.10).
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum Edition {
+    /// 1200px images, full CSS.
+    Standard,
+    /// Grayscale, 480×800, simplified CSS — input for the XTC converter.
+    X4,
+}
+
+impl Edition {
+    /// Filename suffix: `""` / `" (X4)"` (§3.11).
+    pub fn file_suffix(self) -> &'static str {
+        match self {
+            Edition::Standard => "",
+            Edition::X4 => " (X4)",
+        }
+    }
+}
+
+/// Issue-level metadata rendered on the cover, front page and OPF (§3.10).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct IssueMeta {
+    pub date: Date,
+    /// Days since the first issue; EPUB3 `group-position`.
+    pub issue_number: i64,
+    pub generated_at: Timestamp,
+    /// "Friday, August 15, 2026".
+    pub display_date: String,
+    pub article_count: i64,
+    pub section_count: i64,
+    pub total_words: i64,
+    pub reading_minutes: i64,
+}
+
+impl IssueMeta {
+    /// The issue's name, without an edition tag: "The Daily EPUB — 2026-08-15".
+    pub fn title(&self) -> String {
+        format!("The Daily EPUB — {}", self.date)
+    }
+
+    /// `dc:title` for one edition: [`title`](Self::title) plus the edition tag
+    /// (§3.10).
+    ///
+    /// Both editions land in the same BookOrbit library, and BookOrbit — like
+    /// every OPDS client — lists books by `dc:title`. Carrying the distinction
+    /// only in the filename makes them indistinguishable everywhere except the
+    /// per-book file listing, so the title and the filename share one suffix.
+    pub fn title_for(&self, edition: Edition) -> String {
+        format!("{}{}", self.title(), edition.file_suffix())
+    }
+
+    /// "22 articles · ~1h 45m read · 6 sections" (§3.10).
+    pub fn stats_line(&self) -> String {
+        let (h, m) = (self.reading_minutes / 60, self.reading_minutes % 60);
+        let time = if h > 0 {
+            format!("~{h}h {m}m read")
+        } else {
+            format!("~{m}m read")
+        };
+        format!(
+            "{} articles · {} · {} sections",
+            self.article_count, time, self.section_count
+        )
+    }
+}
+
+/// Everything the EPUB builder needs; fully materialized before rendering (§3.10).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Issue {
+    pub meta: IssueMeta,
+    pub lineup: Lineup,
+    pub editorial: Editorial,
+    pub world_briefing: Option<WorldBriefing>,
+    /// Colophon facts: models used, token cost, feed counts (§3.10).
+    pub colophon: Colophon,
+}
+
+/// Back-matter facts printed in the colophon chapter (§3.10).
+#[derive(Debug, Clone, Default, PartialEq, Serialize, Deserialize)]
+pub struct Colophon {
+    pub model: String,
+    pub entries_fetched: i64,
+    pub feeds_seen: i64,
+    pub candidates: i64,
+    pub cost_usd: f64,
+    pub generator_version: String,
+}
+
+/// A downloaded, re-encoded image embedded in an edition (§3.10 images).
+#[derive(Debug, Clone, PartialEq)]
+pub struct ImageAsset {
+    /// Manifest id, unique within the issue.
+    pub id: String,
+    /// Path inside the EPUB, e.g. `images/art-1234-0.jpg`.
+    pub href: String,
+    pub mime: String,
+    pub data: Vec<u8>,
+    pub alt: String,
+    pub caption: Option<String>,
+    /// The original remote URL, used to rewrite `<img src>`.
+    pub source_url: String,
+}
+
+/// A file produced by the build/publish stages (§3.11).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Artifact {
+    pub edition: Edition,
+    pub path: PathBuf,
+    pub bytes: u64,
+}
+
+// ---------------------------------------------------------------------------
+// Feedback (§3.9)
+// ---------------------------------------------------------------------------
+
+/// 👍 / 👎 stored as `+1` / `-1` in `ratings.vote` (§3.9).
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "lowercase")]
+pub enum Vote {
+    Up,
+    Down,
+}
+
+impl Vote {
+    pub fn as_i64(self) -> i64 {
+        match self {
+            Vote::Up => 1,
+            Vote::Down => -1,
+        }
+    }
+
+    /// Path segment used in rating links: `up` / `down` (§3.9).
+    pub fn as_str(self) -> &'static str {
+        match self {
+            Vote::Up => "up",
+            Vote::Down => "down",
+        }
+    }
+
+    pub fn parse(s: &str) -> Option<Self> {
+        match s {
+            "up" => Some(Vote::Up),
+            "down" => Some(Vote::Down),
+            _ => None,
+        }
+    }
+}
+
+/// A recorded reader vote (`ratings` table, §3.9).
+#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
+pub struct Rating {
+    pub issue_date: Date,
+    pub article_id: ArticleId,
+    pub vote: Vote,
+    pub rated_at: Timestamp,
+}
+
+/// Beta-smoothed per-feed upvote rate used by the pre-filter (`feed_priors`, §3.9).
+#[derive(Debug, Clone, Copy, Default, PartialEq, Serialize, Deserialize)]
+pub struct FeedPrior {
+    pub feed_id: FeedId,
+    pub upvotes: i64,
+    pub downvotes: i64,
+    pub included: i64,
+}
+
+impl FeedPrior {
+    /// `(up + 1) / (up + down + 2)` — 0.5 with no evidence (§3.9).
+    pub fn rate(&self) -> f64 {
+        (self.upvotes + 1) as f64 / (self.upvotes + self.downvotes + 2) as f64
+    }
+}
+
+// ---------------------------------------------------------------------------
+// LLM accounting (§3.6 cost guardrail)
+// ---------------------------------------------------------------------------
+
+/// Token counters accumulated across every DeepSeek call in a run (§3.6).
+#[derive(Debug, Clone, Copy, Default, PartialEq, Eq, Serialize, Deserialize)]
+pub struct TokenUsage {
+    /// Cache-miss input tokens (billed at the full input rate).
+    pub input_tokens: i64,
+    /// Prefix-cache hits (billed at the cached rate).
+    pub cached_tokens: i64,
+    pub output_tokens: i64,
+}
+
+impl TokenUsage {
+    pub fn add(&mut self, other: TokenUsage) {
+        self.input_tokens += other.input_tokens;
+        self.cached_tokens += other.cached_tokens;
+        self.output_tokens += other.output_tokens;
+    }
+
+    /// USD cost given the per-1M-token prices from `[deepseek]` config (§3.6).
+    pub fn cost_usd(&self, price_input: f64, price_cached: f64, price_output: f64) -> f64 {
+        (self.input_tokens as f64 * price_input
+            + self.cached_tokens as f64 * price_cached
+            + self.output_tokens as f64 * price_output)
+            / 1_000_000.0
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn ts() -> Timestamp {
+        "2026-08-15T05:30:00Z".parse().unwrap()
+    }
+
+    fn social(source: SocialSource, score: i64, comments: i64) -> SocialRef {
+        SocialRef {
+            article_id: 1,
+            source,
+            item_id: Some("1".into()),
+            score,
+            num_comments: comments,
+            item_url: None,
+            fetched_at: ts(),
+        }
+    }
+
+    #[test]
+    fn composite_social_score_matches_spec_formula() {
+        let refs = vec![
+            social(SocialSource::Hn, 342, 210),
+            social(SocialSource::Reddit, 99, 40),
+        ];
+        let expected = (343f64).log10() + 0.7 * (100f64).log10() + 0.5 * (251f64).log10();
+        assert!((composite_social_score(&refs) - expected).abs() < 1e-9);
+        assert_eq!(composite_social_score(&[]), 0.0);
+    }
+
+    #[test]
+    fn feed_prior_is_beta_smoothed() {
+        assert_eq!(FeedPrior::default().rate(), 0.5);
+        let p = FeedPrior {
+            feed_id: 1,
+            upvotes: 3,
+            downvotes: 1,
+            included: 4,
+        };
+        assert!((p.rate() - 4.0 / 6.0).abs() < 1e-12);
+    }
+
+    #[test]
+    fn stats_line_and_reading_time() {
+        assert_eq!(reading_minutes(0), 1);
+        assert_eq!(reading_minutes(440), 2);
+        let meta = IssueMeta {
+            date: "2026-08-15".parse().unwrap(),
+            issue_number: 1,
+            generated_at: ts(),
+            display_date: "Friday, August 15, 2026".into(),
+            article_count: 22,
+            section_count: 6,
+            total_words: 23_000,
+            reading_minutes: 105,
+        };
+        assert_eq!(meta.stats_line(), "22 articles · ~1h 45m read · 6 sections");
+        assert_eq!(meta.title(), "The Daily EPUB — 2026-08-15");
+        assert_eq!(
+            meta.title_for(Edition::Standard),
+            "The Daily EPUB — 2026-08-15"
+        );
+        assert_eq!(
+            meta.title_for(Edition::X4),
+            "The Daily EPUB — 2026-08-15 (X4)"
+        );
+        // Title and filename carry the same tag, so a book found in the library
+        // maps back to a file without guessing.
+        assert!(
+            meta.title_for(Edition::X4)
+                .ends_with(Edition::X4.file_suffix())
+        );
+    }
+
+    #[test]
+    fn vote_and_social_source_round_trip() {
+        assert_eq!(Vote::parse("up"), Some(Vote::Up));
+        assert_eq!(Vote::Down.as_i64(), -1);
+        assert_eq!(
+            SocialSource::parse("lobsters"),
+            Some(SocialSource::Lobsters)
+        );
+        assert_eq!(SocialSource::Hn.as_str(), "hn");
+    }
+}
diff --git a/src/world.rs b/src/world.rs
new file mode 100644
index 0000000..4604d2a
--- /dev/null
+++ b/src/world.rs
@@ -0,0 +1,395 @@
+//! World Briefing from the Wikipedia Current Events portal (spec §3.8).
+//!
+//! Failure is non-fatal: the section is simply omitted.
+
+use std::collections::HashSet;
+
+use jiff::civil::Date;
+use scraper::node::Node;
+
+use crate::epub::images::{text_escape, to_xhtml};
+use crate::types::WorldBriefing;
+
+/// `ego_tree::NodeRef<'_, Node>` without depending on `ego_tree` directly.
+type NodeRef<'a> = <scraper::ElementRef<'a> as std::ops::Deref>::Target;
+
+/// Portal page pattern: `Portal:Current_events/{YYYY}_{Month}_{D}` (§3.8).
+pub const PORTAL_BASE: &str = "https://en.wikipedia.org/wiki/Portal:Current_events/";
+/// MediaWiki REST HTML endpoint used to fetch the rendered page (§3.8).
+pub const REST_HTML_BASE: &str = "https://en.wikipedia.org/api/rest_v1/page/html/";
+/// Attribution line required by the portal's licence (§3.8).
+pub const ATTRIBUTION: &str = "Source: Wikipedia Current Events Portal, CC BY-SA 4.0.";
+/// How many days back [`fetch_with_fallback`] will look for a populated page.
+///
+/// The portal page for a day is created as an empty stub a day ahead and filled
+/// in over the course of that day, so the 05:30 run finds nothing under the
+/// issue's own date. Walking back one or two days lands on a complete page —
+/// which is also the news the reader has not seen yet at breakfast.
+pub const MAX_LOOKBACK_DAYS: i8 = 3;
+
+const MONTHS: [&str; 12] = [
+    "January",
+    "February",
+    "March",
+    "April",
+    "May",
+    "June",
+    "July",
+    "August",
+    "September",
+    "October",
+    "November",
+    "December",
+];
+
+/// Containers the day's events live in, most specific first (§3.8).
+const CONTENT_SELECTORS: &[&str] = &[
+    "div.current-events-content",
+    "div.description",
+    "div.current-events-main",
+    "section",
+    "body",
+];
+
+/// Elements whose entire subtree is dropped: citations, edit links, chrome.
+const DROP_ELEMENTS: &[&str] = &[
+    "script", "style", "sup", "table", "figure", "img", "link", "meta", "noscript", "input",
+    "button", "h1", "h2", "h3", "h4", "h5", "h6",
+];
+
+/// Class fragments marking wiki chrome rather than content.
+const DROP_CLASSES: &[&str] = &[
+    "mw-editsection",
+    "reference",
+    "navbox",
+    "metadata",
+    "noprint",
+    "current-events-navbar",
+    "current-events-heading",
+    "hatnote",
+    "mw-jump-link",
+];
+
+#[derive(Debug, thiserror::Error)]
+pub enum WorldError {
+    #[error("http error: {0}")]
+    Http(#[from] reqwest::Error),
+    #[error("no events found for {0}")]
+    Empty(Date),
+}
+
+/// Build the portal page title for a date, e.g. `2026_August_15` (§3.8).
+pub fn portal_title(date: Date) -> String {
+    let month = MONTHS
+        .get((date.month() as usize).saturating_sub(1))
+        .copied()
+        .unwrap_or("January");
+    format!("{}_{}_{}", date.year(), month, date.day())
+}
+
+/// Human-readable portal URL, used for the CC BY-SA attribution link (§3.8).
+pub fn portal_url(date: Date) -> String {
+    format!("{PORTAL_BASE}{}", portal_title(date))
+}
+
+/// MediaWiki REST HTML URL for the day's portal page (§3.8).
+pub fn rest_html_url(date: Date) -> String {
+    format!(
+        "{REST_HTML_BASE}Portal%3ACurrent_events%2F{}",
+        portal_title(date)
+    )
+}
+
+/// Fetch the day's portal page, strip citations/edit links, flatten internal
+/// links to plain text and return a compact briefing (§3.8).
+pub async fn fetch(http: &reqwest::Client, date: Date) -> Result<WorldBriefing, WorldError> {
+    let url = rest_html_url(date);
+    tracing::debug!(%url, "fetching the world briefing");
+    let html = http
+        .get(&url)
+        .send()
+        .await?
+        .error_for_status()?
+        .text()
+        .await?;
+    let body_html = extract_events(&html).ok_or(WorldError::Empty(date))?;
+    Ok(WorldBriefing {
+        date,
+        source_url: portal_url(date),
+        body_html,
+    })
+}
+
+/// The days [`fetch_with_fallback`] tries, newest first: `date`, then each
+/// earlier day up to `max_days_back` (§3.8).
+pub fn candidate_days(date: Date, max_days_back: i8) -> Vec<Date> {
+    (0..=max_days_back.max(0))
+        .map_while(|back| date.checked_sub(jiff::Span::new().days(back)).ok())
+        .collect()
+}
+
+/// Fetch the newest populated portal page at or before `date`, looking back at
+/// most [`MAX_LOOKBACK_DAYS`] days (§3.8).
+///
+/// The issue's own day is almost always still an empty stub at 05:30, so this is
+/// the entry point the pipeline uses; the returned briefing carries the date it
+/// actually covers in [`WorldBriefing::date`].
+pub async fn fetch_with_fallback(
+    http: &reqwest::Client,
+    date: Date,
+    max_days_back: i8,
+) -> Result<WorldBriefing, WorldError> {
+    let mut last = WorldError::Empty(date);
+    for day in candidate_days(date, max_days_back) {
+        match fetch(http, day).await {
+            Ok(briefing) => {
+                if day != date {
+                    tracing::info!(
+                        %date,
+                        covering = %day,
+                        "the issue day's portal page was not populated yet; using an earlier day"
+                    );
+                }
+                return Ok(briefing);
+            }
+            Err(e) => {
+                tracing::debug!(%day, "world briefing not available for this day: {e}");
+                last = e;
+            }
+        }
+    }
+    Err(last)
+}
+
+/// Best-effort wrapper used by the pipeline: never fails the run (§3.8).
+pub async fn fetch_optional(
+    http: &reqwest::Client,
+    date: Date,
+    enabled: bool,
+) -> Option<WorldBriefing> {
+    if !enabled {
+        return None;
+    }
+    match fetch_with_fallback(http, date, MAX_LOOKBACK_DAYS).await {
+        Ok(b) => Some(b),
+        Err(e) => {
+            tracing::warn!(%date, "world briefing unavailable: {e}");
+            None
+        }
+    }
+}
+
+/// Extract the day's bulleted events from a rendered portal page (§3.8).
+///
+/// Citations, edit links and navigation are dropped; internal links become plain
+/// text; the result is a sanitized `<p>`/`<ul>` fragment.
+pub fn extract_events(html: &str) -> Option<String> {
+    let doc = scraper::Html::parse_document(html);
+    for selector in CONTENT_SELECTORS {
+        let Ok(sel) = scraper::Selector::parse(selector) else {
+            continue;
+        };
+        for container in doc.select(&sel) {
+            let mut out = String::new();
+            walk_children(*container, &mut out);
+            let cleaned = sanitize(&out);
+            if !cleaned.is_empty() && cleaned.contains("<li>") {
+                return Some(to_xhtml(&cleaned));
+            }
+        }
+    }
+    None
+}
+
+fn sanitize(fragment: &str) -> String {
+    let tags: HashSet<&str> = ["p", "ul", "ol", "li", "strong", "em", "br"]
+        .into_iter()
+        .collect();
+    ammonia::Builder::new()
+        .tags(tags)
+        .clean(fragment)
+        .to_string()
+        .trim()
+        .to_string()
+}
+
+fn is_dropped(el: &scraper::node::Element) -> bool {
+    if DROP_ELEMENTS.contains(&el.name()) {
+        return true;
+    }
+    if let Some(class) = el.attr("class")
+        && DROP_CLASSES
+            .iter()
+            .any(|dropped| class.split_whitespace().any(|c| c == *dropped))
+    {
+        return true;
+    }
+    if el.attr("role") == Some("navigation") {
+        return true;
+    }
+    false
+}
+
+fn walk_children(node: NodeRef<'_>, out: &mut String) {
+    for child in node.children() {
+        walk(child, out);
+    }
+}
+
+fn walk(node: NodeRef<'_>, out: &mut String) {
+    match node.value() {
+        Node::Text(text) => out.push_str(&text_escape(text)),
+        Node::Element(el) => {
+            if is_dropped(el) {
+                return;
+            }
+            match el.name() {
+                "ul" | "ol" | "li" | "p" => {
+                    let name = el.name();
+                    out.push('<');
+                    out.push_str(name);
+                    out.push('>');
+                    walk_children(node, out);
+                    out.push_str("</");
+                    out.push_str(name);
+                    out.push('>');
+                }
+                "b" | "strong" => {
+                    out.push_str("<strong>");
+                    walk_children(node, out);
+                    out.push_str("</strong>");
+                }
+                "i" | "em" => {
+                    out.push_str("<em>");
+                    walk_children(node, out);
+                    out.push_str("</em>");
+                }
+                "dt" => {
+                    out.push_str("<p><strong>");
+                    walk_children(node, out);
+                    out.push_str("</strong></p>");
+                }
+                "br" => out.push(' '),
+                // `a`, `span`, `div`, `dl`, `dd`, `section` … are transparent:
+                // internal links keep their text only (§3.8).
+                _ => walk_children(node, out),
+            }
+        }
+        _ => {}
+    }
+}
+
+/// Render the briefing to sanitized XHTML with the CC BY-SA attribution (§3.8).
+pub fn render_xhtml(briefing: &WorldBriefing) -> String {
+    format!(
+        "{}\n      <p class=\"attribution\">{} <a href=\"{}\">{}</a></p>\n",
+        briefing.body_html,
+        text_escape(ATTRIBUTION),
+        text_escape(&briefing.source_url),
+        text_escape(&briefing.source_url)
+    )
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn fixture() -> String {
+        let path = std::path::Path::new(env!("CARGO_MANIFEST_DIR"))
+            .join("tests/fixtures/wikipedia_current_events.html");
+        std::fs::read_to_string(path).expect("fixture must exist")
+    }
+
+    #[test]
+    fn portal_titles_and_urls_match_the_spec() {
+        let date: Date = "2026-08-15".parse().unwrap();
+        assert_eq!(portal_title(date), "2026_August_15");
+        assert_eq!(
+            portal_url(date),
+            "https://en.wikipedia.org/wiki/Portal:Current_events/2026_August_15"
+        );
+        assert_eq!(
+            rest_html_url(date),
+            "https://en.wikipedia.org/api/rest_v1/page/html/Portal%3ACurrent_events%2F2026_August_15"
+        );
+        let single_digit: Date = "2026-01-05".parse().unwrap();
+        assert_eq!(portal_title(single_digit), "2026_January_5");
+    }
+
+    #[test]
+    fn extracts_events_and_strips_wiki_chrome() {
+        let body = extract_events(&fixture()).expect("events");
+        assert!(body.contains("<ul>"));
+        assert!(body.contains("<strong>Armed conflicts and attacks</strong>"));
+        assert!(body.contains("Heavy rain floods the Charles River basin"));
+        // Internal links are flattened to plain text.
+        assert!(!body.contains("<a"));
+        assert!(body.contains("Boston"));
+        // Citations, edit links and navboxes are gone.
+        assert!(!body.contains("[1]"));
+        assert!(!body.contains("edit"));
+        assert!(!body.contains("Ongoing events"));
+        // Nested sub-bullets survive.
+        assert!(body.contains("A second-level detail"));
+    }
+
+    #[test]
+    fn missing_events_yield_none() {
+        assert!(extract_events("<html><body><p>Nothing here</p></body></html>").is_none());
+        assert!(extract_events("").is_none());
+    }
+
+    /// Wikipedia creates each day's portal page as an empty stub a day ahead and
+    /// fills it in over that day, so the 05:30 run sees this, not news (§3.8).
+    /// Its only `<li>`s are the edit/history/watch navbar, which must not count
+    /// as content — otherwise the fallback never triggers.
+    #[test]
+    fn an_unpopulated_stub_page_yields_no_events() {
+        let path = std::path::Path::new(env!("CARGO_MANIFEST_DIR"))
+            .join("tests/fixtures/wikipedia_current_events_empty_stub.html");
+        let stub = std::fs::read_to_string(path).expect("fixture must exist");
+        assert!(stub.contains("current-events-navbar"), "fixture sanity");
+        assert!(extract_events(&stub).is_none());
+    }
+
+    #[test]
+    fn the_fallback_walks_backwards_from_the_issue_date() {
+        let date: Date = "2026-08-15".parse().unwrap();
+        assert_eq!(
+            candidate_days(date, 3),
+            [
+                "2026-08-15".parse().unwrap(),
+                "2026-08-14".parse().unwrap(),
+                "2026-08-13".parse().unwrap(),
+                "2026-08-12".parse().unwrap(),
+            ]
+        );
+        // Never forwards, and never fewer than the issue's own day.
+        assert_eq!(candidate_days(date, 0), [date]);
+        assert_eq!(candidate_days(date, -1), [date]);
+        // Month and year boundaries.
+        assert_eq!(
+            candidate_days("2026-01-01".parse().unwrap(), 2),
+            [
+                "2026-01-01".parse().unwrap(),
+                "2025-12-31".parse().unwrap(),
+                "2025-12-30".parse().unwrap(),
+            ]
+        );
+    }
+
+    #[test]
+    fn rendering_appends_the_attribution() {
+        let briefing = WorldBriefing {
+            date: "2026-08-15".parse().unwrap(),
+            source_url: portal_url("2026-08-15".parse().unwrap()),
+            body_html: "<ul><li>Something happened</li></ul>".into(),
+        };
+        let xhtml = render_xhtml(&briefing);
+        assert!(xhtml.contains("CC BY-SA 4.0"));
+        assert!(xhtml.contains(
+            "<a href=\"https://en.wikipedia.org/wiki/Portal:Current_events/2026_August_15\">"
+        ));
+        assert!(xhtml.contains("Something happened"));
+    }
+}
diff --git a/systemd/daily-epub-generate.service b/systemd/daily-epub-generate.service
new file mode 100644
index 0000000..3be780a
--- /dev/null
+++ b/systemd/daily-epub-generate.service
@@ -0,0 +1,62 @@
+# The Daily EPUB — build and publish one issue (spec §3.15). Driven by
+# daily-epub-generate.timer; run by hand with `sudo systemctl start daily-epub-generate`.
+#
+# Install: see the header of daily-epub.service (same binary, config and env file).
+# Logs: journalctl -u daily-epub-generate -f
+
+[Unit]
+Description=The Daily EPUB — generate today's issue
+Documentation=https://github.com/thallada/the-daily-epub
+After=network-online.target miniflux.service
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+User=daily-epub
+Group=daily-epub
+ExecStart=/usr/local/bin/daily-epub --config /etc/daily-epub/config.toml generate
+EnvironmentFile=-/etc/daily-epub/env
+Environment=RUST_LOG=info,sqlx=warn,hyper=warn
+# Extraction, images and the LLM stage are network-bound; give the run room but
+# never let a hung fetch hold the timer's next firing.
+TimeoutStartSec=45min
+Nice=10
+IOSchedulingClass=idle
+
+# --- state + writable paths ---------------------------------------------
+StateDirectory=daily-epub
+StateDirectoryMode=0750
+WorkingDirectory=/var/lib/daily-epub
+# The publish dirs from [publish] in config.toml — keep these in sync.
+# Every path listed here must exist at start, or the unit fails with 226/NAMESPACE.
+ReadWritePaths=/home/thallada/bookorbit/books/daily-epub /var/lib/daily-epub/xtc
+
+# --- hardening (spec §3.15) ---------------------------------------------
+ProtectSystem=strict
+# read-only (not yes): the BookOrbit publish dir lives under /home, and
+# ProtectHome=yes would mask it even with the ReadWritePaths entry above.
+ProtectHome=read-only
+PrivateTmp=yes
+PrivateDevices=yes
+NoNewPrivileges=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectKernelLogs=yes
+ProtectControlGroups=yes
+ProtectClock=yes
+ProtectHostname=yes
+ProtectProc=invisible
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+LockPersonality=yes
+# No MemoryDenyWriteExecute here: this unit spawns Node (epub-to-xtc-converter),
+# whose JIT needs W+X pages (§3.11).
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+SystemCallErrorNumber=EPERM
+UMask=0027
+
+[Install]
+WantedBy=multi-user.target
diff --git a/systemd/daily-epub-generate.timer b/systemd/daily-epub-generate.timer
new file mode 100644
index 0000000..dcd79b0
--- /dev/null
+++ b/systemd/daily-epub-generate.timer
@@ -0,0 +1,22 @@
+# Fires daily-epub-generate.service every morning at 05:30 Eastern (spec §3.15).
+#
+# Install:
+#   sudo install -m0644 systemd/daily-epub-generate.timer /etc/systemd/system/
+#   sudo systemctl daemon-reload && sudo systemctl enable --now daily-epub-generate.timer
+# Check:  systemctl list-timers daily-epub-generate.timer
+
+[Unit]
+Description=Build The Daily EPUB every morning
+Documentation=https://github.com/thallada/the-daily-epub
+
+[Timer]
+Unit=daily-epub-generate.service
+OnCalendar=*-*-* 05:30:00 America/New_York
+# Catch up after downtime — a missed morning still gets its issue.
+Persistent=true
+# Spread the load on the Miniflux/DeepSeek side.
+RandomizedDelaySec=300
+AccuracySec=1min
+
+[Install]
+WantedBy=timers.target
diff --git a/systemd/daily-epub.service b/systemd/daily-epub.service
new file mode 100644
index 0000000..c9306b7
--- /dev/null
+++ b/systemd/daily-epub.service
@@ -0,0 +1,70 @@
+# The Daily EPUB — rating endpoints, XTC OPDS feed and static files (spec §3.12, §3.15).
+#
+# Install:
+#   cargo build --release && sudo install -m0755 target/release/daily-epub /usr/local/bin/
+#   sudo install -d -m0750 -o daily-epub -g daily-epub /etc/daily-epub
+#   sudo install -m0640 -o daily-epub -g daily-epub config.example.toml /etc/daily-epub/config.toml
+#   printf 'DAILY_EPUB_SERVER__HMAC_SECRET=%s\n' "$(openssl rand -hex 32)" \
+#     | sudo tee /etc/daily-epub/env >/dev/null   # plus DAILY_EPUB_MINIFLUX__API_KEY etc.
+#   sudo chmod 0600 /etc/daily-epub/env
+#   sudo useradd --system --home /var/lib/daily-epub --shell /usr/sbin/nologin daily-epub
+#   sudo install -m0644 systemd/daily-epub*.{service,timer} /etc/systemd/system/
+#   sudo systemctl daemon-reload && sudo systemctl enable --now daily-epub.service
+#
+# Then reverse-proxy daily.hallada.net → 127.0.0.1:3499 (spec §3.15).
+
+[Unit]
+Description=The Daily EPUB server (ratings, XTC OPDS)
+Documentation=https://github.com/thallada/the-daily-epub
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=exec
+User=daily-epub
+Group=daily-epub
+ExecStart=/usr/local/bin/daily-epub --config /etc/daily-epub/config.toml serve
+EnvironmentFile=-/etc/daily-epub/env
+Environment=RUST_LOG=info,sqlx=warn,hyper=warn
+Restart=on-failure
+RestartSec=5s
+# SIGTERM triggers the graceful shutdown in server::serve.
+KillSignal=SIGTERM
+TimeoutStopSec=20s
+
+# --- state + writable paths ---------------------------------------------
+StateDirectory=daily-epub
+StateDirectoryMode=0750
+WorkingDirectory=/var/lib/daily-epub
+# The publish dirs from [publish] in config.toml — keep these in sync.
+# Every path listed here must exist at start, or the unit fails with 226/NAMESPACE.
+ReadWritePaths=/home/thallada/bookorbit/books/daily-epub /var/lib/daily-epub/xtc
+
+# --- hardening (spec §3.15) ---------------------------------------------
+ProtectSystem=strict
+# read-only (not yes): the BookOrbit publish dir lives under /home, and
+# ProtectHome=yes would mask it even with the ReadWritePaths entry above.
+ProtectHome=read-only
+PrivateTmp=yes
+PrivateDevices=yes
+NoNewPrivileges=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectKernelLogs=yes
+ProtectControlGroups=yes
+ProtectClock=yes
+ProtectHostname=yes
+ProtectProc=invisible
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+SystemCallErrorNumber=EPERM
+UMask=0027
+
+[Install]
+WantedBy=multi-user.target
diff --git a/tests/e2e_pipeline.rs b/tests/e2e_pipeline.rs
new file mode 100644
index 0000000..2a2ed34
--- /dev/null
+++ b/tests/e2e_pipeline.rs
@@ -0,0 +1,622 @@
+//! The capstone test: the whole pipeline, driven as a library, with no network
+//! (spec §2, §5).
+//!
+//! ```text
+//! synthetic entries → dedupe → extract (offline) → persist → prefilter
+//!   → select → editorial → issue → both EPUB editions → publish → OPDS + rows
+//! ```
+//!
+//! Two passes over the same machinery:
+//!
+//! * [`skip_llm_pipeline_produces_a_published_issue`] takes the `--skip-llm`
+//!   route (prefilter order selects, feed excerpts stand in for summaries);
+//! * [`llm_pipeline_runs_against_a_mock_backend`] takes the DeepSeek route with
+//!   [`MockBackend`] standing in for the API, so stages A, B and C are all
+//!   exercised — prompts, parsers, budget accounting and all — offline.
+//!
+//! `Extractor::offline` guarantees the extraction stage never opens a socket, and
+//! no article in the fixtures carries an image, so the EPUB builder's image
+//! downloader has nothing to fetch.
+
+use std::path::Path;
+
+use jiff::Timestamp;
+use jiff::civil::Date;
+
+use daily_epub::config::{Config, PublishConfig, ServerConfig, XtcConfig};
+use daily_epub::curate::llm::{LlmClient, MockBackend, UsageMeter};
+use daily_epub::curate::{Curator, editorial, prefilter};
+use daily_epub::db::Db;
+use daily_epub::extract::Extractor;
+use daily_epub::types::{
+    Article, Colophon, Edition, Entry, Issue, Lineup, ScoredArticle, SourceKind, Vote,
+};
+use daily_epub::{auth, dedupe, epub, miniflux, pipeline, publish};
+
+const SECRET: &str = "e2e-secret";
+
+fn ts(s: &str) -> Timestamp {
+    s.parse().expect("timestamp")
+}
+
+fn date() -> Date {
+    "2026-08-15".parse().expect("date")
+}
+
+fn body(words: usize) -> String {
+    format!(
+        "<p>{}</p>",
+        "a sentence about database internals and page layout ".repeat(words / 8)
+    )
+}
+
+/// A config whose every writable path points inside `root`.
+fn test_config(root: &Path) -> Config {
+    Config {
+        database_path: root.join("db").join("daily-epub.db"),
+        out_dir: root.join("out"),
+        target_article_count: 6,
+        prefilter_keep: 20,
+        world_briefing: false,
+        publish: PublishConfig {
+            bookorbit_dir: root.join("bookorbit"),
+            xtc_dir: root.join("xtc"),
+        },
+        xtc: XtcConfig {
+            // Never shell out to node in a test.
+            enabled: false,
+            ..XtcConfig::default()
+        },
+        server: ServerConfig {
+            public_url: "https://daily.hallada.net".into(),
+            hmac_secret: Some(SECRET.into()),
+            ..ServerConfig::default()
+        },
+        ..Config::default()
+    }
+}
+
+/// One day of ingest: eight entries covering duplicates, an excerpt-only story,
+/// and three things that are not articles at all.
+fn ingested() -> Vec<Entry> {
+    let base = Entry {
+        id: 0,
+        feed_id: 0,
+        feed_title: None,
+        category: Some("Tech".into()),
+        title: String::new(),
+        url: String::new(),
+        canonical_url: None,
+        author: Some("Dana Author".into()),
+        published_at: Some(ts("2026-08-15T04:00:00Z")),
+        comments_url: None,
+        raw_content: String::new(),
+        fetched_at: ts("2026-08-15T05:30:00Z"),
+    };
+
+    vec![
+        Entry {
+            id: 101,
+            feed_id: 1,
+            feed_title: Some("Hacker News Front Page".into()),
+            title: "A Deep Dive Into B-Trees".into(),
+            url: "https://blog.dev/b-trees?utm_source=hnrss".into(),
+            comments_url: Some("https://news.ycombinator.com/item?id=41234567".into()),
+            raw_content: "<p>Discussion link only.</p>".into(),
+            ..base.clone()
+        },
+        // Same story, richer body: the cluster keeps this one.
+        Entry {
+            id: 102,
+            feed_id: 2,
+            feed_title: Some("Scour: Databases".into()),
+            title: "A Deep Dive Into B-Trees".into(),
+            url: "https://blog.dev/b-trees#intro".into(),
+            raw_content: body(900),
+            ..base.clone()
+        },
+        Entry {
+            id: 103,
+            feed_id: 3,
+            feed_title: Some("The Rust Blog".into()),
+            title: "Async Cancellation, Revisited".into(),
+            url: "https://rust.dev/cancellation".into(),
+            raw_content: body(1400),
+            ..base.clone()
+        },
+        Entry {
+            id: 104,
+            feed_id: 4,
+            feed_title: Some("Astronomy Notes".into()),
+            title: "What Webb Saw in the Rings of Uranus".into(),
+            url: "https://space.dev/webb-uranus".into(),
+            raw_content: body(700),
+            ..base.clone()
+        },
+        Entry {
+            id: 105,
+            feed_id: 5,
+            feed_title: Some("Boston Civic Tech".into()),
+            title: "The MBTA's New Signal Priority Pilot".into(),
+            url: "https://boston.dev/signal-priority".into(),
+            raw_content: body(600),
+            ..base.clone()
+        },
+        // Excerpt only: penalized by the pre-filter but still eligible (§3.5).
+        Entry {
+            id: 106,
+            feed_id: 6,
+            feed_title: Some("Lobsters".into()),
+            title: "Notes on Writing a Toy Allocator".into(),
+            url: "https://other.dev/allocator".into(),
+            comments_url: Some("https://lobste.rs/s/abcdef/notes".into()),
+            raw_content: "<p>A teaser paragraph and nothing else.</p>".into(),
+            ..base.clone()
+        },
+        // Non-articles: a video host and an empty title (§3.2).
+        Entry {
+            id: 107,
+            feed_id: 7,
+            feed_title: Some("Video Feed".into()),
+            title: "A conference talk".into(),
+            url: "https://www.youtube.com/watch?v=abc".into(),
+            raw_content: "<p>watch it</p>".into(),
+            ..base.clone()
+        },
+        Entry {
+            id: 108,
+            feed_id: 8,
+            feed_title: Some("Broken Feed".into()),
+            title: "   ".into(),
+            url: "https://broken.dev/x".into(),
+            raw_content: body(400),
+            ..base.clone()
+        },
+    ]
+}
+
+/// Stages 1–4: ingest → dedupe → extract → persist, exactly as `pipeline.rs`
+/// orders them (extraction runs *before* the article rows are written).
+async fn ingest_dedupe_extract_persist(db: &Db) -> Vec<Article> {
+    let entries = ingested();
+    db.upsert_entries(&entries).await.expect("persist entries");
+
+    let feeds = std::collections::HashMap::from([(
+        2,
+        miniflux::FeedMeta {
+            id: 2,
+            title: "Scour: Databases".into(),
+            site_url: "https://scour.ing".into(),
+            feed_url: "https://scour.ing/feed?interest=databases".into(),
+            category: Some("Interests".into()),
+        },
+    )]);
+    let (mut articles, stats) = dedupe::cluster_with_feeds(entries, &miniflux::feed_urls(&feeds));
+    assert_eq!(stats.entries_in, 8);
+    assert_eq!(stats.dropped_non_article, 2, "video host + empty title");
+    assert_eq!(stats.merged, 1, "the B-trees story arrived twice");
+    assert_eq!(articles.len(), 5);
+
+    let extractor = Extractor::offline(vec![]);
+    assert!(
+        !extractor.can_fetch(),
+        "the test must never hit the network"
+    );
+    let extracted = extractor.extract_all(&mut articles).await;
+    assert_eq!(extracted.excerpt_only, 1, "the allocator teaser");
+
+    for article in &mut articles {
+        article.id = db.upsert_article(article).await.expect("persist article");
+        assert!(article.id > 0);
+    }
+    let b_trees = articles
+        .iter()
+        .find(|a| a.canonical_url == "https://blog.dev/b-trees")
+        .expect("the merged cluster");
+    assert!(b_trees.came_via(SourceKind::Scour));
+    assert!(b_trees.came_via(SourceKind::HnFrontpage));
+    assert_eq!(b_trees.best_entry_id, 102, "the richest body won");
+
+    articles
+}
+
+/// Stages 11–14: assemble, build both editions, publish, record.
+async fn assemble_build_publish(
+    db: &Db,
+    cfg: &Config,
+    lineup: Lineup,
+    colophon: Colophon,
+) -> Issue {
+    let editorial_doc = editorial::fallback_editorial(&lineup);
+    let mut lineup = lineup;
+    pipeline::apply_summaries(&mut lineup, &editorial_doc);
+    assert!(
+        lineup.picks.iter().all(|p| p.summary.is_some()),
+        "every pick carries a summary before the EPUB is built"
+    );
+
+    let issue_number = db.next_issue_number(date()).await.expect("issue number");
+    let issue = pipeline::build_issue(
+        date(),
+        issue_number,
+        ts("2026-08-15T09:30:00Z"),
+        lineup,
+        editorial_doc,
+        None,
+        colophon,
+    );
+    assert_eq!(issue.meta.display_date, "Saturday, August 15, 2026");
+
+    // --- EPUB: both editions (§3.10) ---
+    let (artifacts, images) = epub::build_all(&issue, cfg, &cfg.out_dir)
+        .await
+        .expect("both editions build");
+    assert_eq!(artifacts.len(), 2);
+    assert_eq!(images, 0, "the fixtures carry no images");
+    for artifact in &artifacts {
+        assert!(artifact.path.exists(), "{}", artifact.path.display());
+        assert!(artifact.bytes > 1000);
+        let zip = std::fs::read(&artifact.path).expect("read epub");
+        assert_eq!(&zip[0..4], b"PK\x03\x04", "is a zip");
+        assert_eq!(&zip[38..58], b"application/epub+zip");
+    }
+    assert!(
+        cfg.out_dir
+            .join("The Daily EPUB - 2026-08-15.epub")
+            .exists()
+    );
+    assert!(
+        cfg.out_dir
+            .join("The Daily EPUB - 2026-08-15 (X4).epub")
+            .exists()
+    );
+
+    // Rating links are signed with the configured secret and are what the
+    // running server verifies (§3.9). The chapters are deflated inside the zip,
+    // so assert on the rendered XHTML the builder just zipped.
+    let chapters = epub::build::render_all(
+        &issue,
+        Edition::Standard,
+        &[],
+        &cfg.server.public_url,
+        cfg.server.hmac_secret.as_deref(),
+    )
+    .expect("render chapters");
+    let first = issue.lineup.picks[0].article.id;
+    let expected = auth::rating_url(&cfg.server.public_url, SECRET, date(), first, Vote::Up);
+    let chapter = chapters
+        .iter()
+        .find(|c| c.id == format!("art-{}", issue.lineup.picks[0].article.best_entry_id))
+        .expect("the first article has a chapter");
+    assert!(
+        chapter.xhtml.contains(&expected),
+        "the article footer must carry {expected}\n{}",
+        chapter.xhtml
+    );
+    assert!(
+        daily_epub::server::verify_token(
+            SECRET,
+            date(),
+            first,
+            Vote::Up,
+            &auth::rating_token(SECRET, date(), first, Vote::Up)
+        ),
+        "the server must accept the token the EPUB minted"
+    );
+
+    // --- Publish (§3.11) ---
+    let published = publish::publish_issue(db, cfg, &issue, &artifacts, None)
+        .await
+        .expect("publish");
+    assert_eq!(published.epubs.len(), 2);
+    for artifact in &published.epubs {
+        assert!(artifact.path.starts_with(&cfg.publish.bookorbit_dir));
+        assert!(artifact.path.exists(), "{}", artifact.path.display());
+    }
+    assert!(
+        cfg.publish
+            .bookorbit_dir
+            .join("The Daily EPUB - 2026-08-15.epub")
+            .exists()
+    );
+    assert!(
+        cfg.publish
+            .bookorbit_dir
+            .join("The Daily EPUB - 2026-08-15 (X4).epub")
+            .exists()
+    );
+    assert!(published.xtc.is_none(), "the converter is disabled here");
+
+    // The OPDS feed is regenerated on every publish, even with no XTC files yet.
+    let opds = published.opds.clone().expect("an OPDS feed was written");
+    assert_eq!(opds, cfg.publish.xtc_dir.join("xtc.xml"));
+    let feed = std::fs::read_to_string(&opds).expect("read the OPDS feed");
+    assert!(feed.starts_with("<?xml"), "{feed}");
+    assert!(feed.contains("<feed xmlns=\"http://www.w3.org/2005/Atom\""));
+    assert!(feed.contains(&cfg.server.public_url));
+
+    // --- Record (§3.13) ---
+    let epub_path = published
+        .epubs
+        .iter()
+        .find(|a| a.edition == Edition::Standard)
+        .map(|a| a.path.display().to_string());
+    let x4_path = published
+        .epubs
+        .iter()
+        .find(|a| a.edition == Edition::X4)
+        .map(|a| a.path.display().to_string());
+    db.upsert_issue(
+        date(),
+        issue.meta.issue_number,
+        issue.meta.generated_at,
+        epub_path.as_deref(),
+        x4_path.as_deref(),
+        None,
+        Some(&issue.editorial.front_page_html),
+        Some("{\"status\":\"ok\"}"),
+    )
+    .await
+    .expect("record the issue");
+    db.replace_issue_articles(date(), &issue.lineup.picks)
+        .await
+        .expect("record the lineup");
+
+    let reports = db.recent_reports(5).await.expect("recent reports");
+    assert_eq!(reports.len(), 1);
+    assert_eq!(reports[0].0, date());
+    assert_eq!(reports[0].1.as_deref(), Some("{\"status\":\"ok\"}"));
+
+    let published_ids = db
+        .previously_published_ids()
+        .await
+        .expect("issue_articles rows");
+    assert_eq!(published_ids.len(), issue.lineup.picks.len());
+
+    // Tomorrow's issue is No. 2 (days since the first issue, §3.10).
+    let tomorrow: Date = "2026-08-16".parse().unwrap();
+    assert_eq!(db.next_issue_number(tomorrow).await.unwrap(), 2);
+
+    issue
+}
+
+#[tokio::test]
+async fn skip_llm_pipeline_produces_a_published_issue() {
+    let root = tempfile::tempdir().expect("tempdir");
+    let cfg = test_config(root.path());
+    let db = Db::open_and_migrate(&cfg.database_path)
+        .await
+        .expect("open db");
+
+    let articles = ingest_dedupe_extract_persist(&db).await;
+
+    // --- Stages 6–7 with no LLM at all (notes §6) ---
+    let curator = Curator::new(cfg.clone(), db.clone(), None);
+    let candidates = curator
+        .prefilter(articles, date())
+        .await
+        .expect("prefilter runs");
+    assert_eq!(candidates.len(), 5, "nothing is dropped at this volume");
+    assert!(
+        candidates
+            .windows(2)
+            .all(|w| w[0].prefilter_score >= w[1].prefilter_score),
+        "candidates come back in prefilter order"
+    );
+    // The excerpt-only story is penalized (§3.5).
+    let allocator = candidates
+        .iter()
+        .find(|c| c.article.excerpt_only)
+        .expect("the allocator teaser survived");
+    assert!(allocator.prefilter_score < candidates[0].prefilter_score);
+
+    let lineup = curator.select(candidates, date()).await.expect("select");
+    assert_eq!(lineup.picks.len(), 5, "target 6, only 5 candidates exist");
+    assert!(lineup.lead().is_some(), "a lead story is always chosen");
+    assert!(!lineup.section_order.is_empty());
+    assert!(
+        lineup
+            .picks
+            .iter()
+            .all(|p| lineup.section_order.contains(&p.section)),
+        "every pick sits in a listed section"
+    );
+
+    let colophon = Colophon {
+        model: "none (--skip-llm)".into(),
+        entries_fetched: 8,
+        feeds_seen: 8,
+        candidates: 5,
+        cost_usd: 0.0,
+        generator_version: format!("daily-epub {}", daily_epub::VERSION),
+    };
+    let issue = assemble_build_publish(&db, &cfg, lineup, colophon).await;
+
+    // Front page and summaries came from excerpts, not from a model.
+    assert!(!issue.editorial.front_page_html.is_empty());
+    assert_eq!(issue.editorial.summaries.len(), issue.lineup.picks.len());
+
+    // Re-running the same date replaces rather than duplicates (notes §12).
+    let republished = publish::publish_issue(
+        &db,
+        &cfg,
+        &issue,
+        &[
+            daily_epub::types::Artifact {
+                edition: Edition::Standard,
+                path: cfg.out_dir.join("The Daily EPUB - 2026-08-15.epub"),
+                bytes: 0,
+            },
+            daily_epub::types::Artifact {
+                edition: Edition::X4,
+                path: cfg.out_dir.join("The Daily EPUB - 2026-08-15 (X4).epub"),
+                bytes: 0,
+            },
+        ],
+        None,
+    )
+    .await
+    .expect("republish");
+    assert_eq!(republished.epubs.len(), 2);
+    let files: Vec<String> = std::fs::read_dir(&cfg.publish.bookorbit_dir)
+        .expect("read bookorbit dir")
+        .filter_map(|e| e.ok().map(|e| e.file_name().to_string_lossy().into_owned()))
+        .collect();
+    assert_eq!(files.len(), 2, "no duplicate files: {files:?}");
+
+    db.replace_issue_articles(date(), &issue.lineup.picks)
+        .await
+        .expect("replace lineup");
+    assert_eq!(
+        db.previously_published_ids().await.unwrap().len(),
+        issue.lineup.picks.len(),
+        "issue_articles was replaced, not appended"
+    );
+}
+
+#[tokio::test]
+async fn llm_pipeline_runs_against_a_mock_backend() {
+    let root = tempfile::tempdir().expect("tempdir");
+    let cfg = test_config(root.path());
+    let db = Db::open_and_migrate(&cfg.database_path)
+        .await
+        .expect("open db");
+
+    let articles = ingest_dedupe_extract_persist(&db).await;
+    let ctx = prefilter::PrefilterContext::load(&db, date())
+        .await
+        .expect("prefilter context");
+    let candidates: Vec<ScoredArticle> = prefilter::run(articles, &ctx, &cfg);
+    let ids: Vec<i64> = candidates.iter().map(|c| c.article.id).collect();
+    assert_eq!(ids.len(), 5);
+
+    // --- Script DeepSeek: one stage-A batch, one stage-B call, five stage-C
+    // summaries and one front page (§3.6). ---
+    let backend = std::sync::Arc::new(MockBackend::new());
+    let usage = daily_epub::types::TokenUsage {
+        input_tokens: 1000,
+        cached_tokens: 500,
+        output_tokens: 200,
+    };
+    let scores: Vec<String> = ids
+        .iter()
+        .enumerate()
+        .map(|(i, id)| {
+            format!(
+                r#"{{"id": {id}, "score": {}, "category": "Tech & Engineering",
+                     "rationale": "solid systems writeup", "is_paywalled_guess": false}}"#,
+                9 - i
+            )
+        })
+        .collect();
+    backend.push(format!("{{\"articles\": [{}]}}", scores.join(",")), usage);
+
+    let picks: Vec<String> = ids
+        .iter()
+        .enumerate()
+        .map(|(i, id)| {
+            format!(
+                r#"{{"id": {id}, "section": "{}", "position": {}, "lead_story": {}}}"#,
+                if i == 0 {
+                    "Top Stories"
+                } else {
+                    "Tech & Engineering"
+                },
+                i + 1,
+                i == 0
+            )
+        })
+        .collect();
+    backend.push(format!("{{\"picks\": [{}]}}", picks.join(",")), usage);
+
+    for id in &ids {
+        backend.push(
+            format!(r#"{{"summary": "A newspaper abstract for article {id}."}}"#),
+            usage,
+        );
+    }
+    backend.push(
+        r#"{"from_the_editor": "Today's issue leans on storage internals.\n\nRead on.",
+            "section_intros": {"Top Stories": "The day in one place."}}"#,
+        usage,
+    );
+
+    let meter = UsageMeter::new(&cfg.deepseek, cfg.max_daily_usd);
+    let llm = LlmClient::with_backend(
+        &cfg.deepseek.model,
+        "You are the editor of The Daily EPUB.".into(),
+        meter.clone(),
+        backend.clone(),
+    );
+    let curator = Curator::new(cfg.clone(), db.clone(), Some(llm));
+
+    let mut candidates = candidates;
+    curator
+        .score(&mut candidates, date())
+        .await
+        .expect("stage A");
+    assert!(
+        candidates.iter().all(|c| c.llm.is_some()),
+        "every candidate came back scored"
+    );
+
+    let lineup = curator.select(candidates, date()).await.expect("stage B");
+    assert_eq!(lineup.picks.len(), 5);
+    assert_eq!(
+        lineup.lead().map(|p| p.article.id),
+        Some(ids[0]),
+        "the model's lead choice is honored"
+    );
+    assert_eq!(
+        lineup.section_order.first().map(String::as_str),
+        Some("Top Stories")
+    );
+
+    let editorial_doc = curator.editorial(&lineup).await.expect("stage C");
+    assert_eq!(editorial_doc.summaries.len(), 5);
+    assert!(
+        editorial_doc
+            .summaries
+            .values()
+            .all(|s| s.contains("newspaper abstract")),
+        "the model's summaries were used, not excerpts"
+    );
+    assert!(editorial_doc.front_page_html.contains("storage internals"));
+    assert_eq!(
+        editorial_doc
+            .section_intros
+            .get("Top Stories")
+            .map(String::as_str),
+        Some("The day in one place.")
+    );
+
+    // Every scripted response was consumed, and the meter priced them (§3.6).
+    assert_eq!(backend.calls(), 1 + 1 + 5 + 1);
+    let total = meter.total();
+    assert_eq!(total.input_tokens, 8 * usage.input_tokens);
+    assert!(meter.cost_usd() > 0.0 && !meter.budget_exceeded());
+    // The taste profile leads every request, byte for byte — that is what makes
+    // DeepSeek's prefix cache hit (§3.6).
+    let prompts = backend.prompts();
+    assert!(
+        prompts
+            .iter()
+            .all(|p| p.system.starts_with("You are the editor")),
+        "the system prompt must be identical across requests"
+    );
+
+    // And it all assembles, builds and publishes like the skip-llm route does.
+    let colophon = Colophon {
+        model: cfg.deepseek.model.clone(),
+        entries_fetched: 8,
+        feeds_seen: 8,
+        candidates: 5,
+        cost_usd: meter.cost_usd(),
+        generator_version: format!("daily-epub {}", daily_epub::VERSION),
+    };
+    let mut lineup = lineup;
+    pipeline::apply_summaries(&mut lineup, &editorial_doc);
+    let issue = assemble_build_publish(&db, &cfg, lineup, colophon).await;
+    assert_eq!(issue.colophon.model, cfg.deepseek.model);
+    assert!(issue.colophon.cost_usd > 0.0);
+}
diff --git a/tests/fixtures/.gitkeep b/tests/fixtures/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/tests/fixtures/deepseek_front_page.json b/tests/fixtures/deepseek_front_page.json
new file mode 100644
index 0000000..89016d8
--- /dev/null
+++ b/tests/fixtures/deepseek_front_page.json
@@ -0,0 +1,8 @@
+{
+  "from_the_editor": "Two of today's pieces are, underneath, the same story: what it costs to move data you no longer trust. The lead — a team hauling forty terabytes off Postgres, rollback plans and all — is the version with the invoices attached, and it earns the front page by refusing to tidy up its failures. Read it first, while the coffee is hot; it rewards attention and it is long.\n\nThe local desk supplies the counterpoint. Somebody has finally put the MBTA's slow-zone data into a shape a rider can argue with, and the charts do more persuading than a year of press releases. It is a short read and a satisfying one, and it pairs unreasonably well with the migration story: both are about institutions discovering what they actually have.\n\nThe rest of the issue is quieter than usual. That is not a complaint — a thin Friday is a good excuse to finish the long one properly rather than skimming six. If you only get through the lead today, you will not have missed much else.",
+  "section_intros": {
+    "Top Stories": "The day's most substantial piece: a full account of a forty-terabyte migration, with the failures left in. It is long, technical and unusually honest about what went wrong.",
+    "Boston & Local": "Transit data gets the treatment it deserves. A rider-built analysis of MBTA slow zones, with charts you can check yourself and a methodology section that holds up.",
+    "Niche Corner": "A section the model wrote an intro for even though nothing was placed in it today — a stray thread about tape-drive firmware and the people who still maintain it. The issue drops intros for sections that never ran."
+  }
+}
diff --git a/tests/fixtures/deepseek_lineup.json b/tests/fixtures/deepseek_lineup.json
new file mode 100644
index 0000000..648ff0a
--- /dev/null
+++ b/tests/fixtures/deepseek_lineup.json
@@ -0,0 +1,12 @@
+{
+  "picks": [
+    { "id": 101, "section": "Top Stories", "position": 1, "lead_story": true },
+    { "id": 102, "section": "Tech & Engineering", "position": 1, "lead_story": false },
+    { "id": 103, "section": "Tech & Engineering", "position": 2, "lead_story": false },
+    { "id": 104, "section": "AI & Machine Learning", "position": 1, "lead_story": false },
+    { "id": 105, "section": "Boston & Local", "position": 1, "lead_story": false },
+    { "id": 106, "section": "Culture & Essays", "position": 1 },
+    { "section": "Niche Corner", "position": 2, "lead_story": false },
+    "the model sometimes trails off like this"
+  ]
+}
diff --git a/tests/fixtures/deepseek_score_batch.json b/tests/fixtures/deepseek_score_batch.json
new file mode 100644
index 0000000..384f825
--- /dev/null
+++ b/tests/fixtures/deepseek_score_batch.json
@@ -0,0 +1,32 @@
+{
+  "articles": [
+    {
+      "id": 101,
+      "score": 8.5,
+      "category": "Tech & Engineering",
+      "rationale": "first-hand 40TB Postgres migration with numbers, failures and rollback plan",
+      "is_paywalled_guess": false
+    },
+    {
+      "id": 102,
+      "score": 3.0,
+      "category": "AI & Machine Learning",
+      "rationale": "model release announcement, no independent evaluation",
+      "is_paywalled_guess": false
+    },
+    {
+      "id": 103,
+      "score": 6.5,
+      "category": "Boston & Local",
+      "rationale": "MBTA slow-zone data analysis with original charts",
+      "is_paywalled_guess": false
+    },
+    {
+      "id": 104,
+      "score": 5.0,
+      "category": "Culture & Essays",
+      "rationale": "promising essay on typesetting, body appears truncated",
+      "is_paywalled_guess": true
+    }
+  ]
+}
diff --git a/tests/fixtures/deepseek_score_batch_messy.json b/tests/fixtures/deepseek_score_batch_messy.json
new file mode 100644
index 0000000..4dc7293
--- /dev/null
+++ b/tests/fixtures/deepseek_score_batch_messy.json
@@ -0,0 +1,35 @@
+{
+  "articles": [
+    {
+      "id": 201,
+      "score": 7.0,
+      "category": "Science & Space",
+      "rationale": "careful write-up of an amateur radio occultation measurement",
+      "is_paywalled_guess": false
+    },
+    {
+      "id": "202",
+      "score": "6",
+      "category": "Niche Corner",
+      "rationale": "mailing-list argument about tape drives, oddly gripping",
+      "is_paywalled_guess": "false"
+    },
+    {
+      "id": 203,
+      "score": 4
+    },
+    {
+      "id": 204,
+      "score": 12.5,
+      "category": "Top Stories",
+      "rationale": "model ignored the rubric ceiling here",
+      "is_paywalled_guess": false
+    },
+    {
+      "score": 9.0,
+      "category": "Top Stories",
+      "rationale": "no id at all, unusable"
+    },
+    "a bare string where an object belongs"
+  ]
+}
diff --git a/tests/fixtures/hn_item.json b/tests/fixtures/hn_item.json
new file mode 100644
index 0000000..05cd36a
--- /dev/null
+++ b/tests/fixtures/hn_item.json
@@ -0,0 +1,54 @@
+{
+  "id": 40100000,
+  "created_at": "2026-08-15T09:12:00.000Z",
+  "type": "story",
+  "author": "poster",
+  "title": "A Story About Databases",
+  "url": "https://example.com/databases",
+  "points": 342,
+  "text": null,
+  "children": [
+    {
+      "id": 40100001,
+      "type": "comment",
+      "author": "alice",
+      "text": "The <i>write path</i> is the interesting part here.<p>Especially fsync batching.",
+      "points": 61,
+      "children": [
+        {
+          "id": 40100002,
+          "type": "comment",
+          "author": "bob",
+          "text": "Agreed — and the group commit numbers match my own benchmarks.",
+          "points": 24,
+          "children": []
+        }
+      ]
+    },
+    {
+      "id": 40100003,
+      "type": "comment",
+      "author": "carol",
+      "text": "Counterpoint: the benchmark hardware is unrealistic.",
+      "points": 12,
+      "children": []
+    },
+    {
+      "id": 40100004,
+      "type": "comment",
+      "author": null,
+      "text": null,
+      "points": null,
+      "children": [
+        {
+          "id": 40100005,
+          "type": "comment",
+          "author": "dana",
+          "text": "Replying to a since-deleted comment, but the point stands.",
+          "points": 3,
+          "children": []
+        }
+      ]
+    }
+  ]
+}
diff --git a/tests/fixtures/lobsters_story.json b/tests/fixtures/lobsters_story.json
new file mode 100644
index 0000000..bfabe0a
--- /dev/null
+++ b/tests/fixtures/lobsters_story.json
@@ -0,0 +1,41 @@
+{
+  "short_id": "abcdef",
+  "title": "A Story About Databases",
+  "url": "https://example.com/databases",
+  "score": 48,
+  "comment_count": 4,
+  "comments": [
+    {
+      "short_id": "c1",
+      "comment": "<p>Nice writeup of the write path.</p>",
+      "score": 20,
+      "indent_level": 1,
+      "parent_comment": null,
+      "commenting_user": "pushcx"
+    },
+    {
+      "short_id": "c2",
+      "comment": "<p>Do you have numbers for NVMe?</p>",
+      "score": 9,
+      "indent_level": 2,
+      "parent_comment": "c1",
+      "commenting_user": { "username": "second" }
+    },
+    {
+      "short_id": "c3",
+      "comment": "<p>Yes, in the appendix.</p>",
+      "score": 4,
+      "indent_level": 3,
+      "parent_comment": "c2",
+      "commenting_user": "third"
+    },
+    {
+      "short_id": "c4",
+      "comment": "<p>Unrelated: the site's typography is lovely.</p>",
+      "score": 3,
+      "indent_level": 1,
+      "parent_comment": null,
+      "commenting_user": "other"
+    }
+  ]
+}
diff --git a/tests/fixtures/m2_hn_item.json b/tests/fixtures/m2_hn_item.json
new file mode 100644
index 0000000..eb50547
--- /dev/null
+++ b/tests/fixtures/m2_hn_item.json
@@ -0,0 +1,82 @@
+{
+  "id": 41234567,
+  "created_at": "2026-08-14T13:02:11.000Z",
+  "created_at_i": 1786748531,
+  "type": "story",
+  "author": "tylerh",
+  "title": "A Deep Dive Into B-Trees",
+  "url": "https://blog.dev/post",
+  "text": null,
+  "points": 342,
+  "parent_id": null,
+  "story_id": null,
+  "children": [
+    {
+      "id": 41234600,
+      "created_at": "2026-08-14T13:20:00.000Z",
+      "type": "comment",
+      "author": "dbnerd",
+      "title": null,
+      "url": null,
+      "text": "<p>The section on page splits is the clearest I have read. <i>Bookmarked.</i></p>",
+      "points": 88,
+      "parent_id": 41234567,
+      "story_id": 41234567,
+      "children": [
+        {
+          "id": 41234611,
+          "created_at": "2026-08-14T13:41:00.000Z",
+          "type": "comment",
+          "author": "tylerh",
+          "title": null,
+          "url": null,
+          "text": "<p>Thanks &mdash; the diagrams took longer than the prose.</p>",
+          "points": 31,
+          "parent_id": 41234600,
+          "story_id": 41234567,
+          "children": [
+            {
+              "id": 41234620,
+              "created_at": "2026-08-14T14:00:00.000Z",
+              "type": "comment",
+              "author": "gridlines",
+              "title": null,
+              "url": null,
+              "text": "<p>What did you draw them with?</p>",
+              "points": 4,
+              "parent_id": 41234611,
+              "story_id": 41234567,
+              "children": []
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 41234700,
+      "created_at": "2026-08-14T15:05:00.000Z",
+      "type": "comment",
+      "author": "deleted_user",
+      "title": null,
+      "url": null,
+      "text": null,
+      "points": null,
+      "parent_id": 41234567,
+      "story_id": 41234567,
+      "children": []
+    },
+    {
+      "id": 41234800,
+      "created_at": "2026-08-14T16:12:00.000Z",
+      "type": "comment",
+      "author": "skeptic",
+      "title": null,
+      "url": null,
+      "text": "<p>Counterpoint: LSM trees win on write-heavy workloads.</p>",
+      "points": 45,
+      "parent_id": 41234567,
+      "story_id": 41234567,
+      "children": []
+    }
+  ]
+}
diff --git a/tests/fixtures/m2_hn_search_by_url.json b/tests/fixtures/m2_hn_search_by_url.json
new file mode 100644
index 0000000..e89c5d8
--- /dev/null
+++ b/tests/fixtures/m2_hn_search_by_url.json
@@ -0,0 +1,50 @@
+{
+  "hits": [
+    {
+      "created_at": "2026-08-14T13:02:11.000Z",
+      "title": "A Deep Dive Into B-Trees",
+      "url": "https://blog.dev/post",
+      "author": "tylerh",
+      "points": 342,
+      "story_text": null,
+      "comment_text": null,
+      "num_comments": 210,
+      "story_id": null,
+      "story_title": null,
+      "story_url": null,
+      "parent_id": null,
+      "created_at_i": 1786748531,
+      "_tags": ["story", "author_tylerh", "story_41234567"],
+      "objectID": "41234567",
+      "_highlightResult": {
+        "url": {
+          "value": "https://blog.dev/post",
+          "matchLevel": "full",
+          "matchedWords": ["https://blog.dev/post"]
+        }
+      }
+    },
+    {
+      "created_at": "2026-08-10T09:15:00.000Z",
+      "title": "A Deep Dive Into B-Trees (2019)",
+      "url": "https://blog.dev/post?utm_source=twitter",
+      "author": "someoneelse",
+      "points": 12,
+      "story_text": null,
+      "comment_text": null,
+      "num_comments": 3,
+      "story_id": null,
+      "created_at_i": 1786396500,
+      "_tags": ["story", "author_someoneelse", "story_41000000"],
+      "objectID": "41000000"
+    }
+  ],
+  "nbHits": 2,
+  "page": 0,
+  "nbPages": 1,
+  "hitsPerPage": 20,
+  "exhaustiveNbHits": true,
+  "query": "https://blog.dev/post",
+  "params": "query=https%3A%2F%2Fblog.dev%2Fpost&restrictSearchableAttributes=url",
+  "processingTimeMS": 3
+}
diff --git a/tests/fixtures/m2_hn_search_empty.json b/tests/fixtures/m2_hn_search_empty.json
new file mode 100644
index 0000000..759b413
--- /dev/null
+++ b/tests/fixtures/m2_hn_search_empty.json
@@ -0,0 +1,11 @@
+{
+  "hits": [],
+  "nbHits": 0,
+  "page": 0,
+  "nbPages": 0,
+  "hitsPerPage": 20,
+  "exhaustiveNbHits": true,
+  "query": "https://blog.dev/never-submitted",
+  "params": "query=https%3A%2F%2Fblog.dev%2Fnever-submitted&restrictSearchableAttributes=url",
+  "processingTimeMS": 1
+}
diff --git a/tests/fixtures/m2_lobsters_story.json b/tests/fixtures/m2_lobsters_story.json
new file mode 100644
index 0000000..3c9487b
--- /dev/null
+++ b/tests/fixtures/m2_lobsters_story.json
@@ -0,0 +1,74 @@
+{
+  "short_id": "abcdef",
+  "short_id_url": "https://lobste.rs/s/abcdef",
+  "created_at": "2026-08-14T09:11:04.000-05:00",
+  "title": "A Deep Dive Into B-Trees",
+  "url": "https://blog.dev/post",
+  "score": 78,
+  "flags": 1,
+  "comment_count": 4,
+  "description": "",
+  "description_plain": "",
+  "comments_url": "https://lobste.rs/s/abcdef/a_deep_dive_into_b_trees",
+  "submitter_user": "alice",
+  "user_is_author": false,
+  "tags": ["databases", "rust"],
+  "comments": [
+    {
+      "short_id": "c00001",
+      "short_id_url": "https://lobste.rs/c/c00001",
+      "created_at": "2026-08-14T09:40:00.000-05:00",
+      "is_deleted": false,
+      "is_moderated": false,
+      "score": 21,
+      "flags": 0,
+      "parent_comment": null,
+      "comment": "<p>The page-split diagrams are excellent.</p>",
+      "comment_plain": "The page-split diagrams are excellent.",
+      "indent_level": 1,
+      "commenting_user": "bob"
+    },
+    {
+      "short_id": "c00002",
+      "short_id_url": "https://lobste.rs/c/c00002",
+      "created_at": "2026-08-14T10:02:00.000-05:00",
+      "is_deleted": false,
+      "is_moderated": false,
+      "score": 9,
+      "flags": 0,
+      "parent_comment": "c00001",
+      "comment": "<p>Agreed &mdash; and the prose is tight too.</p>",
+      "comment_plain": "Agreed - and the prose is tight too.",
+      "indent_level": 2,
+      "commenting_user": { "username": "carol", "karma": 4021 }
+    },
+    {
+      "short_id": "c00003",
+      "short_id_url": "https://lobste.rs/c/c00003",
+      "created_at": "2026-08-14T11:15:00.000-05:00",
+      "is_deleted": false,
+      "is_moderated": false,
+      "score": 33,
+      "flags": 0,
+      "parent_comment": null,
+      "comment": "<p>Prior art: the 1979 Comer survey covers most of this.</p>",
+      "comment_plain": "Prior art: the 1979 Comer survey covers most of this.",
+      "indent_level": 1,
+      "commenting_user": "dave"
+    },
+    {
+      "short_id": "c00004",
+      "short_id_url": "https://lobste.rs/c/c00004",
+      "created_at": "2026-08-14T11:59:00.000-05:00",
+      "is_deleted": true,
+      "is_moderated": false,
+      "score": 0,
+      "flags": 0,
+      "parent_comment": "c00003",
+      "comment": "",
+      "comment_plain": "",
+      "indent_level": 2,
+      "commenting_user": "erin"
+    }
+  ]
+}
diff --git a/tests/fixtures/m2_reddit_comments.json b/tests/fixtures/m2_reddit_comments.json
new file mode 100644
index 0000000..e9ba26b
--- /dev/null
+++ b/tests/fixtures/m2_reddit_comments.json
@@ -0,0 +1,105 @@
+[
+  {
+    "kind": "Listing",
+    "data": {
+      "children": [
+        {
+          "kind": "t3",
+          "data": {
+            "subreddit": "programming",
+            "id": "1abcd2",
+            "name": "t3_1abcd2",
+            "title": "A Deep Dive Into B-Trees",
+            "score": 845,
+            "num_comments": 231,
+            "permalink": "/r/programming/comments/1abcd2/a_deep_dive_into_btrees/",
+            "url": "https://blog.dev/post"
+          }
+        }
+      ]
+    }
+  },
+  {
+    "kind": "Listing",
+    "data": {
+      "children": [
+        {
+          "kind": "t1",
+          "data": {
+            "id": "kx1",
+            "name": "t1_kx1",
+            "author": "index_nerd",
+            "score": 412,
+            "body": "Fan-out is the whole ballgame; everything else is bookkeeping.",
+            "depth": 0,
+            "stickied": false,
+            "replies": {
+              "kind": "Listing",
+              "data": {
+                "children": [
+                  {
+                    "kind": "t1",
+                    "data": {
+                      "id": "kx2",
+                      "name": "t1_kx2",
+                      "author": "pagecache",
+                      "score": 130,
+                      "body": "Until your keys are variable length & the math gets ugly.",
+                      "depth": 1,
+                      "stickied": false,
+                      "replies": ""
+                    }
+                  },
+                  {
+                    "kind": "more",
+                    "data": {
+                      "count": 18,
+                      "name": "t1_more1",
+                      "id": "more1",
+                      "children": ["kx9", "kx10"]
+                    }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "kind": "t1",
+          "data": {
+            "id": "kx3",
+            "name": "t1_kx3",
+            "author": "AutoModerator",
+            "score": 1,
+            "body": "Please keep discussion civil.",
+            "depth": 0,
+            "stickied": true,
+            "replies": ""
+          }
+        },
+        {
+          "kind": "t1",
+          "data": {
+            "id": "kx4",
+            "name": "t1_kx4",
+            "author": "[deleted]",
+            "score": null,
+            "body": "[removed]",
+            "depth": 0,
+            "stickied": false,
+            "replies": ""
+          }
+        },
+        {
+          "kind": "more",
+          "data": {
+            "count": 205,
+            "name": "t1_more2",
+            "id": "more2",
+            "children": []
+          }
+        }
+      ]
+    }
+  }
+]
diff --git a/tests/fixtures/m2_reddit_info.json b/tests/fixtures/m2_reddit_info.json
new file mode 100644
index 0000000..08796a3
--- /dev/null
+++ b/tests/fixtures/m2_reddit_info.json
@@ -0,0 +1,69 @@
+{
+  "kind": "Listing",
+  "data": {
+    "after": null,
+    "dist": 3,
+    "modhash": "",
+    "geo_filter": "",
+    "before": null,
+    "children": [
+      {
+        "kind": "t3",
+        "data": {
+          "subreddit": "programming",
+          "id": "1abcd2",
+          "name": "t3_1abcd2",
+          "title": "A Deep Dive Into B-Trees",
+          "score": 845,
+          "ups": 845,
+          "num_comments": 231,
+          "permalink": "/r/programming/comments/1abcd2/a_deep_dive_into_btrees/",
+          "url": "https://blog.dev/post",
+          "author": "u_someone",
+          "created_utc": 1786748531.0,
+          "over_18": false,
+          "stickied": false,
+          "is_self": false
+        }
+      },
+      {
+        "kind": "t3",
+        "data": {
+          "subreddit": "databases",
+          "id": "1efgh3",
+          "name": "t3_1efgh3",
+          "title": "A Deep Dive Into B-Trees",
+          "score": 96,
+          "ups": 96,
+          "num_comments": 14,
+          "permalink": "/r/databases/comments/1efgh3/a_deep_dive_into_btrees/",
+          "url": "https://blog.dev/post",
+          "author": "dbperson",
+          "created_utc": 1786752000.0,
+          "over_18": false,
+          "stickied": false,
+          "is_self": false
+        }
+      },
+      {
+        "kind": "t3",
+        "data": {
+          "subreddit": "rust",
+          "id": "1ijkl4",
+          "name": "t3_1ijkl4",
+          "title": "A Deep Dive Into B-Trees",
+          "score": 12,
+          "ups": 12,
+          "num_comments": 2,
+          "permalink": "/r/rust/comments/1ijkl4/a_deep_dive_into_btrees/",
+          "url": "https://blog.dev/post",
+          "author": "ferris",
+          "created_utc": 1786755000.0,
+          "over_18": false,
+          "stickied": false,
+          "is_self": false
+        }
+      }
+    ]
+  }
+}
diff --git a/tests/fixtures/m2_reddit_info_empty.json b/tests/fixtures/m2_reddit_info_empty.json
new file mode 100644
index 0000000..c60a426
--- /dev/null
+++ b/tests/fixtures/m2_reddit_info_empty.json
@@ -0,0 +1,11 @@
+{
+  "kind": "Listing",
+  "data": {
+    "after": null,
+    "dist": 0,
+    "modhash": "",
+    "geo_filter": "",
+    "before": null,
+    "children": []
+  }
+}
diff --git a/tests/fixtures/reddit_comments.json b/tests/fixtures/reddit_comments.json
new file mode 100644
index 0000000..8414949
--- /dev/null
+++ b/tests/fixtures/reddit_comments.json
@@ -0,0 +1,76 @@
+[
+  {
+    "kind": "Listing",
+    "data": {
+      "children": [
+        {
+          "kind": "t3",
+          "data": {
+            "title": "A Story About Databases",
+            "permalink": "/r/rust/comments/abc/title/",
+            "score": 512,
+            "num_comments": 87
+          }
+        }
+      ]
+    }
+  },
+  {
+    "kind": "Listing",
+    "data": {
+      "children": [
+        {
+          "kind": "t1",
+          "data": {
+            "author": "ferris",
+            "score": 55,
+            "body": "The borrow checker earns its keep here.",
+            "body_html": "&lt;div class=\"md\"&gt;&lt;p&gt;The borrow checker earns its keep here.&lt;/p&gt;&lt;/div&gt;",
+            "replies": {
+              "kind": "Listing",
+              "data": {
+                "children": [
+                  {
+                    "kind": "t1",
+                    "data": {
+                      "author": "crab",
+                      "score": 12,
+                      "body_html": "&lt;div class=\"md\"&gt;&lt;p&gt;Only if you never fight it.&lt;/p&gt;&lt;/div&gt;",
+                      "replies": ""
+                    }
+                  },
+                  {
+                    "kind": "more",
+                    "data": { "count": 14, "children": ["x1", "x2"] }
+                  }
+                ]
+              }
+            }
+          }
+        },
+        {
+          "kind": "t1",
+          "data": {
+            "author": "[deleted]",
+            "score": 1,
+            "body_html": "&lt;div class=\"md\"&gt;&lt;p&gt;[removed]&lt;/p&gt;&lt;/div&gt;",
+            "replies": ""
+          }
+        },
+        {
+          "kind": "t1",
+          "data": {
+            "author": "rustacean",
+            "score": 31,
+            "body_html": "&lt;div class=\"md\"&gt;&lt;p&gt;The section on &amp;quot;unsafe&amp;quot; is the best part.&lt;/p&gt;&lt;/div&gt;",
+            "replies": ""
+          }
+        },
+        {
+          "kind": "more",
+          "data": { "count": 40, "children": ["y1"] }
+        }
+      ]
+    }
+  }
+]
diff --git a/tests/fixtures/wikipedia_current_events.html b/tests/fixtures/wikipedia_current_events.html
new file mode 100644
index 0000000..7c28439
--- /dev/null
+++ b/tests/fixtures/wikipedia_current_events.html
@@ -0,0 +1,36 @@
+<!DOCTYPE html>
+<html prefix="dc: http://purl.org/dc/terms/" about="http://en.wikipedia.org/wiki/Special:Redirect/revision/1">
+<head><meta charset="utf-8"/><title>Portal:Current events/2026 August 15</title></head>
+<body id="mwAA" lang="en" class="mw-content-ltr sitedir-ltr ltr mw-body-content parsoid-body mediawiki mw-parser-output">
+<section data-mw-section-id="0" id="mwAQ">
+  <div class="current-events-main vevent" id="mwAg">
+    <div class="current-events-heading">
+      <span class="summary"><span class="current-events-title">August 15, 2026</span></span>
+      <span class="mw-editsection"><a href="/w/index.php?title=Portal:Current_events/2026_August_15&amp;action=edit">edit</a></span>
+    </div>
+    <div class="current-events-content description" id="mwAw">
+      <p><b>Armed conflicts and attacks</b></p>
+      <ul>
+        <li><a href="./Border_dispute" title="Border dispute">Border dispute</a> in the region continues for a fourth day, with mediators from the <a href="./United_Nations" title="United Nations">United Nations</a> arriving overnight.<sup class="reference" id="cite_ref-1"><a href="#cite_note-1">[1]</a></sup>
+          <ul>
+            <li>A second-level detail about the mediation timetable.</li>
+          </ul>
+        </li>
+        <li>Officials report no casualties.<sup class="reference"><a href="#cite_note-2">[2]</a></sup></li>
+      </ul>
+      <p><b>Disasters and accidents</b></p>
+      <ul>
+        <li>Heavy rain floods the Charles River basin in <a href="./Boston" title="Boston">Boston</a>, <a href="./Massachusetts" title="Massachusetts">Massachusetts</a>, closing several stations.<sup class="reference"><a href="#cite_note-3">[3]</a></sup></li>
+      </ul>
+      <p><b>Science and technology</b></p>
+      <ul>
+        <li>A long-duration flight test concludes successfully.</li>
+      </ul>
+    </div>
+  </div>
+  <div class="navbox" role="navigation">
+    <ul><li>Ongoing events</li><li>Recent deaths</li></ul>
+  </div>
+</section>
+</body>
+</html>
diff --git a/tests/fixtures/wikipedia_current_events_empty_stub.html b/tests/fixtures/wikipedia_current_events_empty_stub.html
new file mode 100644
index 0000000..d4eafa5
--- /dev/null
+++ b/tests/fixtures/wikipedia_current_events_empty_stub.html
@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html prefix="dc: http://purl.org/dc/terms/ mw: http://mediawiki.org/rdf/" about="//en.wikipedia.org/wiki/Special:Redirect/revision/1369461094"><head prefix="mwr: //en.wikipedia.org/wiki/Special:Redirect/"><meta charset="utf-8"/><link rel="dc:replaces" resource="mwr:revision/0"/><meta property="mw:revisionSHA1" content="bqap22vqgtaw0lrodhv0ng2kbg1lo4i"/><meta property="dc:modified" content="2026-08-15T03:30:02Z"/><meta property="mw:pageNamespace" content="100"/><meta property="mw:pageId" content="83976994"/><meta property="mw:htmlVersion" content="2.8.0"/><meta property="mw:html:version" content="2.8.0"/><base href="//en.wikipedia.org/wiki/"/><link rel="dc:isVersionOf" href="//en.wikipedia.org/wiki/Portal:Current_events/2026_August_16"/><title>Portal:Current events/2026 August 16</title><meta property="mw:jsConfigVars" content='{"wgParsoidHtmlVersion":"2.8.0"}'/><meta property="mw:moduleStyles" content="mediawiki.skinning.content.parsoid"/><link rel="stylesheet" href="/w/load.php?lang=en&amp;modules=mediawiki.skinning.content.parsoid%7Cmediawiki.skinning.interface%7Csite.styles&amp;only=styles&amp;skin=vector"/><meta http-equiv="content-language" content="en"/><meta http-equiv="vary" content="Accept"/><meta http-equiv="x-mediawiki-render-id" content="9a187c46-9859-11f1-ac0e-b9eb5a8a3066"/></head><body class="mw-content-ltr sitedir-ltr ltr mw-body-content mediawiki mw-parser-output parsoid-body" lang="en" dir="ltr" data-mw-parsoid-version="0.24.0.0-alpha19" data-mw-html-version="2.8.0"><section data-mw-section-id="0" id="mwAQ"><span class="mw-empty-elt" about="#mwt1" typeof="mw:Transclusion" data-mw='{"parts":[{"template":{"target":{"wt":"Current events","href":"./Template:Current_events"},"params":{"year":{"wt":"2026"},"month":{"wt":"08"},"day":{"wt":"16"},"top":{"wt":"yes"}},"i":0}},"\n\n&lt;!-- All news items below this line -->\n*\n&lt;!-- All news items above this line -->\n\n",{"template":{"target":{"wt":"Current events","href":"./Template:Current_events"},"params":{"year":{"wt":"2026"},"month":{"wt":"08"},"day":{"wt":"16"},"bottom":{"wt":"yes"}},"i":1}}]}' id="mwAg"><style data-mw-deduplicate="TemplateStyles:r1305593205" typeof="mw:Extension/templatestyles" about="#mwt2" data-mw='{"name":"templatestyles","attrs":{"src":"Current events/styles.css"}}'>.mw-parser-output .current-events-main{margin:0.5em 0;padding:0.3em;background-color:var(--background-color-base,#fff);color:inherit;border:1px #cef2e0 solid}.mw-parser-output .current-events-heading{background-color:#cef2e0;color:inherit;font-weight:bold}@media screen{html.skin-theme-clientpref-night .mw-parser-output .current-events-heading{background-color:#0b281a}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .current-events-heading{background-color:#0b281a}}.mw-parser-output .current-events-title{padding:0.4em}.mw-parser-output .current-events-navbar{list-style:none;margin:0;font-size:small}.mw-parser-output .current-events-navbar li{display:inline-block;padding:0 0.4em}.mw-parser-output .current-events-content{padding:0 0.3em}.mw-parser-output .current-events-content-heading{margin-top:0.3em;font-weight:bold}.mw-parser-output .current-events-more{border-width:2px;font-size:10pt;font-weight:bold;padding:0.3em 0.6em}.mw-parser-output .current-events-nav{margin:auto;text-align:center;line-height:1.2}.mw-parser-output .current-events-nav a{display:inline-block;margin:0.5em;padding:0.5em;background-color:var(--background-color-neutral,#eaecf0)}.mw-parser-output .current-events-nav a>div{font-weight:bold}@media all and (min-width:480px){.mw-parser-output .current-events-heading{align-items:center;display:flex}.mw-parser-output .current-events-title{flex:1}.mw-parser-output .current-events-navbar{flex:0 auto;text-align:right;white-space:nowrap}.mw-parser-output .current-events-nav{max-width:22em}.mw-parser-output .current-events-nav a{width:9em}}</style></span><div class="current-events" about="#mwt1" id="mwAw">
+<div role="region" aria-label="August 16" id="2026_August_16" class="current-events-main vevent">
+    <div class="current-events-heading plainlinks">
+        <div class="current-events-title" role="heading"><span class="summary">August<span typeof="mw:Entity"> </span>16,<span typeof="mw:Entity"> </span>2026<span style="display: none;"><span typeof="mw:Entity"> </span>(<span class="bday dtstart published updated itvstart">2026-08-16</span>)</span> (Sunday)</span><link rel="mw:PageProp/Category" href="./Category:2026_by_day#2026-08-16"/>
+        </div>
+        <ul class="current-events-navbar editlink noprint"><li><a rel="mw:ExtLink" href="https://en.wikipedia.org/w/index.php?title=Portal:Current_events/2026_August_16&amp;action=edit&amp;editintro=Portal:Current_events/Edit_instructions" class="external text" data-mw-original-href="//en.wikipedia.org/w/index.php?title=Portal:Current_events/2026_August_16&amp;action=edit&amp;editintro=Portal:Current_events/Edit_instructions">edit</a></li><li><a rel="mw:ExtLink" href="https://en.wikipedia.org/w/index.php?title=Portal:Current_events/2026_August_16&amp;action=history" class="external text" data-mw-original-href="//en.wikipedia.org/w/index.php?title=Portal:Current_events/2026_August_16&amp;action=history">history</a></li><li><a rel="mw:ExtLink" href="https://en.wikipedia.org/w/index.php?title=Portal:Current_events/2026_August_16&amp;action=watch" class="external text" data-mw-original-href="//en.wikipedia.org/w/index.php?title=Portal:Current_events/2026_August_16&amp;action=watch">watch</a></li>
+        </ul>
+    </div>
+    <div class="current-events-content description">
+
+<!-- All news items below this line -->
+<ul></ul>
+<!-- All news items above this line -->
+
+</div></div><div class="current-events-nav" role="navigation">
+        <div><a rel="mw:WikiLink" href="./Portal:Current_events/August_2026" title="Portal:Current events/August 2026">Month<div>August 2026</div></a></div><a rel="mw:WikiLink" href="./Portal:Current_events/2026_August_15" title="Portal:Current events/2026 August 15">Previous day<div>August 15</div></a><a rel="mw:WikiLink" href="./Portal:Current_events/2026_August_17?action=edit&amp;redlink=1" title="Portal:Current events/2026 August 17" class="new" typeof="mw:LocalizedAttrs" data-mw-i18n='{"title":{"lang":"x-page","key":"red-link-title","params":["Portal:Current events/2026 August 17"]}}'>Next day<div>August 17</div></a></div></div></section></body></html>
\ No newline at end of file
diff --git a/tests/m2_pipeline.rs b/tests/m2_pipeline.rs
new file mode 100644
index 0000000..579e9de
--- /dev/null
+++ b/tests/m2_pipeline.rs
@@ -0,0 +1,257 @@
+//! Milestone 2 integration test: Miniflux entries → dedupe → extraction (§3.2, §3.3).
+//!
+//! No network: the extractor is built with [`Extractor::offline`], so the fetch
+//! leg of the §3.3 priority chain is skipped and the Miniflux/excerpt legs run
+//! exactly as they do in production (notes §6).
+
+use jiff::Timestamp;
+
+use daily_epub::extract::{self, Extractor};
+use daily_epub::types::{Article, Entry, ExtractMethod, SourceKind};
+use daily_epub::{dedupe, miniflux};
+
+fn ts(s: &str) -> Timestamp {
+    s.parse().expect("timestamp")
+}
+
+fn body(words: usize) -> String {
+    format!("<p>{}</p>", "sqlite pages and btrees ".repeat(words / 4))
+}
+
+/// One page of ingest output: the same story from three feeds plus some noise.
+fn ingested() -> Vec<Entry> {
+    let base = Entry {
+        id: 0,
+        feed_id: 0,
+        feed_title: None,
+        category: Some("Tech".into()),
+        title: String::new(),
+        url: String::new(),
+        canonical_url: None,
+        author: None,
+        published_at: Some(ts("2026-08-15T04:00:00Z")),
+        comments_url: None,
+        raw_content: String::new(),
+        fetched_at: ts("2026-08-15T05:30:00Z"),
+    };
+
+    vec![
+        // 1. HN frontpage: title + link only, plus the discussion link.
+        Entry {
+            id: 101,
+            feed_id: 1,
+            feed_title: Some("Hacker News Front Page".into()),
+            title: "A Deep Dive Into B-Trees".into(),
+            url: "https://blog.dev/b-trees?utm_source=hnrss".into(),
+            comments_url: Some("https://news.ycombinator.com/item?id=41234567".into()),
+            raw_content: "<p>Comments</p>".into(),
+            ..base.clone()
+        },
+        // 2. Scour: same story, same URL modulo the fragment, richer summary.
+        Entry {
+            id: 102,
+            feed_id: 2,
+            feed_title: Some("Scour: Databases".into()),
+            title: "A Deep Dive Into B-Trees".into(),
+            url: "https://blog.dev/b-trees#intro".into(),
+            raw_content: format!(
+                r#"<p>Intro.</p><figure><img src="/img/split.png" alt="a page split"></figure>{}"#,
+                body(700)
+            ),
+            published_at: Some(ts("2026-08-15T03:00:00Z")),
+            ..base.clone()
+        },
+        // 3. The blog's own feed: different URL, same story (title pass merges it).
+        Entry {
+            id: 103,
+            feed_id: 3,
+            feed_title: Some("blog.dev".into()),
+            title: "A Deep Dive into B-Trees!".into(),
+            url: "https://blog.dev/2026/08/b-trees".into(),
+            author: Some("Dana Author".into()),
+            raw_content: "<p>Short summary of the post.</p>".into(),
+            published_at: Some(ts("2026-08-15T02:00:00Z")),
+            ..base.clone()
+        },
+        // 4. A different story, feed excerpt only.
+        Entry {
+            id: 104,
+            feed_id: 4,
+            feed_title: Some("Lobsters".into()),
+            title: "Notes on Writing a Toy Allocator".into(),
+            url: "https://other.dev/allocator".into(),
+            comments_url: Some("https://lobste.rs/s/abcdef/notes".into()),
+            raw_content: "<p>A teaser paragraph and nothing else.</p>".into(),
+            ..base.clone()
+        },
+        // 5–7. Non-articles: video host, media enclosure, empty title.
+        Entry {
+            id: 105,
+            feed_id: 5,
+            feed_title: Some("Video Feed".into()),
+            title: "A conference talk".into(),
+            url: "https://www.youtube.com/watch?v=abc".into(),
+            raw_content: "<p>watch it</p>".into(),
+            ..base.clone()
+        },
+        Entry {
+            id: 106,
+            feed_id: 6,
+            feed_title: Some("A Podcast".into()),
+            title: "Episode 42".into(),
+            url: "https://cdn.dev/episodes/42.mp3".into(),
+            raw_content: "<audio src=\"https://cdn.dev/episodes/42.mp3\"></audio>".into(),
+            ..base.clone()
+        },
+        Entry {
+            id: 107,
+            feed_id: 7,
+            feed_title: Some("Broken Feed".into()),
+            title: "   ".into(),
+            url: "https://broken.dev/x".into(),
+            raw_content: body(500),
+            ..base.clone()
+        },
+    ]
+}
+
+#[tokio::test]
+async fn dedupe_then_extract_produces_ready_articles() {
+    let (mut articles, stats) = dedupe::cluster(ingested());
+
+    // --- §3.2 ---
+    assert_eq!(stats.entries_in, 7);
+    assert_eq!(stats.dropped_non_article, 3);
+    assert_eq!(stats.clusters, 2);
+    assert_eq!(stats.merged, 1);
+    assert_eq!(articles.len(), 2);
+
+    let deep_dive = &articles[0];
+    assert_eq!(deep_dive.canonical_url, "https://blog.dev/b-trees");
+    assert_eq!(deep_dive.id, 0, "not persisted yet");
+    assert_eq!(deep_dive.best_entry_id, 102, "richest content wins");
+    assert_eq!(deep_dive.sources.len(), 3);
+    assert!(deep_dive.came_via(SourceKind::HnFrontpage));
+    assert!(deep_dive.came_via(SourceKind::Scour));
+    assert!(deep_dive.came_via(SourceKind::Feed));
+    assert_eq!(deep_dive.author.as_deref(), Some("Dana Author"));
+    assert_eq!(deep_dive.first_seen, ts("2026-08-15T02:00:00Z"));
+    assert_eq!(
+        deep_dive.comments_url.as_deref(),
+        Some("https://news.ycombinator.com/item?id=41234567")
+    );
+    assert_eq!(deep_dive.chapter_id(), "art-102");
+
+    // --- §3.3 ---
+    let extractor = Extractor::offline(vec![]);
+    assert!(!extractor.can_fetch(), "tests never hit the network");
+    let extract_stats = extractor.extract_all(&mut articles).await;
+    assert_eq!(extract_stats.from_miniflux, 1);
+    assert_eq!(extract_stats.from_readability, 0);
+    assert_eq!(extract_stats.excerpt_only, 1);
+
+    let deep_dive = &articles[0];
+    assert_eq!(deep_dive.extract_method, ExtractMethod::Miniflux);
+    assert!(deep_dive.word_count >= extract::FULL_TEXT_MIN_WORDS);
+    assert!(!deep_dive.excerpt_only);
+    // Sanitized body, relative image resolved against the entry URL.
+    assert!(
+        deep_dive.content_html.contains("<figure>"),
+        "allowlisted tag"
+    );
+    assert!(
+        deep_dive
+            .content_html
+            .contains(r#"src="https://blog.dev/img/split.png""#)
+    );
+    assert_eq!(deep_dive.image_count, 1);
+    assert_eq!(deep_dive.image_urls, ["https://blog.dev/img/split.png"]);
+
+    let allocator = &articles[1];
+    assert_eq!(allocator.canonical_url, "https://other.dev/allocator");
+    assert_eq!(allocator.extract_method, ExtractMethod::Excerpt);
+    assert!(allocator.excerpt_only, "penalized by the pre-filter (§3.5)");
+    assert!(allocator.content_html.contains(extract::EXCERPT_NOTE));
+    assert!(allocator.came_via(SourceKind::Lobsters));
+    assert_eq!(allocator.image_count, 0);
+}
+
+#[tokio::test]
+async fn rerunning_the_stage_is_idempotent() {
+    let (mut once, _) = dedupe::cluster(ingested());
+    let extractor = Extractor::offline(vec![]);
+    extractor.extract_all(&mut once).await;
+
+    // Feeding the already-extracted articles back in changes nothing: the
+    // sanitized body is still full text, so the Miniflux leg wins again.
+    let before: Vec<Article> = once.clone();
+    extractor.extract_all(&mut once).await;
+    assert_eq!(once, before);
+}
+
+#[tokio::test]
+async fn paywalled_stubs_are_marked_excerpt_only() {
+    let entry = Entry {
+        id: 200,
+        feed_id: 20,
+        feed_title: Some("NYT".into()),
+        category: None,
+        title: "A Paywalled Story".into(),
+        url: "https://www.nytimes.com/2026/08/15/story.html".into(),
+        canonical_url: None,
+        author: None,
+        published_at: Some(ts("2026-08-15T04:00:00Z")),
+        comments_url: None,
+        // Long enough to pass the full-text bar, short enough to smell like a stub.
+        raw_content: body(300),
+        fetched_at: ts("2026-08-15T05:30:00Z"),
+    };
+    let (mut articles, _) = dedupe::cluster(vec![entry]);
+    Extractor::offline(vec![]).extract_all(&mut articles).await;
+
+    assert_eq!(articles[0].extract_method, ExtractMethod::Miniflux);
+    assert!(articles[0].word_count >= extract::FULL_TEXT_MIN_WORDS);
+    assert!(articles[0].word_count < extract::PAYWALL_MAX_WORDS);
+    assert!(articles[0].excerpt_only, "known paywall host + short body");
+}
+
+/// A Scour interest feed whose *title* says nothing about Scour is still
+/// recognized when the run's `feed_id → url` map is threaded through (§3.2).
+#[tokio::test]
+async fn feed_urls_make_scour_detection_exact() {
+    let entry = Entry {
+        id: 300,
+        feed_id: 30,
+        // Scour names its feeds after the interest, not after itself.
+        feed_title: Some("Rust".into()),
+        category: Some("Interests".into()),
+        title: "Async Cancellation, Revisited".into(),
+        url: "https://blog.dev/cancellation".into(),
+        canonical_url: None,
+        author: None,
+        published_at: Some(ts("2026-08-15T04:00:00Z")),
+        comments_url: None,
+        raw_content: body(600),
+        fetched_at: ts("2026-08-15T05:30:00Z"),
+    };
+
+    // Without the map, the title/category give nothing away.
+    let (plain, _) = dedupe::cluster(vec![entry.clone()]);
+    assert!(!plain[0].came_via(SourceKind::Scour));
+
+    let feeds = std::collections::HashMap::from([(
+        30,
+        daily_epub::miniflux::FeedMeta {
+            id: 30,
+            title: "Rust".into(),
+            site_url: "https://scour.ing".into(),
+            feed_url: "https://scour.ing/feed?interest=rust&token=secret".into(),
+            category: Some("Interests".into()),
+        },
+    )]);
+    let (exact, _) = dedupe::cluster_with_feeds(vec![entry], &miniflux::feed_urls(&feeds));
+    assert!(
+        exact[0].came_via(SourceKind::Scour),
+        "the feed URL is the only reliable Scour tell"
+    );
+}
diff --git a/tests/m3_curation.rs b/tests/m3_curation.rs
new file mode 100644
index 0000000..1d700ea
--- /dev/null
+++ b/tests/m3_curation.rs
@@ -0,0 +1,280 @@
+//! Milestone 3 integration test: the curation contract (§3.5, §3.6).
+//!
+//! The stage logic is unit-tested inside `src/curate/*`. What this file guards is
+//! the contract *between* the curation stages and everything around them:
+//!
+//! * the recorded DeepSeek fixtures still parse through the real
+//!   `score.rs` / `select.rs` / `editorial.rs` parsers into the structures the
+//!   pipeline consumes, and the lenient parsers still cope with the messy one;
+//! * the shipped Scour OPML still yields the ~220 interests the taste profile is
+//!   assembled from (§3.6a);
+//! * the binary starts, migrates a fresh database and exposes the `--skip-llm`
+//!   path that lets the pipeline run without a DeepSeek key (notes §6).
+//!
+//! No network, no API key, no DeepSeek call.
+
+use std::collections::BTreeSet;
+use std::path::{Path, PathBuf};
+use std::process::Command;
+
+use daily_epub::curate::editorial::FrontPageResponse;
+use daily_epub::curate::profile;
+use daily_epub::curate::score::parse_score_response;
+use daily_epub::curate::select::parse_selection_response;
+use daily_epub::types::LlmScore;
+
+fn repo(rel: &str) -> PathBuf {
+    Path::new(env!("CARGO_MANIFEST_DIR")).join(rel)
+}
+
+fn fixture(name: &str) -> String {
+    let path = repo(&format!("tests/fixtures/{name}"));
+    std::fs::read_to_string(&path).unwrap_or_else(|e| panic!("reading {}: {e}", path.display()))
+}
+
+/// Stage A responses must parse into `{id, score, category, rationale,
+/// is_paywalled_guess}` per article (§3.6).
+#[test]
+fn stage_a_fixture_parses_into_scores() {
+    let items = parse_score_response(&fixture("deepseek_score_batch.json"));
+    assert!(items.len() >= 4, "fixture should cover a realistic batch");
+
+    for item in &items {
+        assert!(item.id > 0, "every item carries a positive article id");
+        assert!(
+            (0.0..=10.0).contains(&item.score),
+            "score {} out of range",
+            item.score
+        );
+        assert!(!item.category.is_empty());
+        assert!(
+            item.rationale.split_whitespace().count() <= 20,
+            "rationale must stay under 20 words: {:?}",
+            item.rationale
+        );
+    }
+    assert!(
+        items.iter().any(|i| i.is_paywalled_guess),
+        "the fixture should exercise the paywall flag"
+    );
+
+    // The batch spans the rubric rather than clustering at one score.
+    let scores: Vec<f64> = items.iter().map(|i| i.score).collect();
+    let spread = scores.iter().cloned().fold(f64::MIN, f64::max)
+        - scores.iter().cloned().fold(f64::MAX, f64::min);
+    assert!(spread >= 3.0, "fixture scores are too uniform to be useful");
+
+    // Every item converts into the shared curation type.
+    let converted: Vec<LlmScore> = items.into_iter().map(LlmScore::from).collect();
+    assert!(converted.iter().all(|s| (0.0..=10.0).contains(&s.score)));
+}
+
+/// The messy fixture must stay messy: it is what proves the parser is lenient
+/// (string ids, string scores, out-of-range scores, junk entries).
+#[test]
+fn stage_a_messy_fixture_is_salvaged_not_rejected() {
+    let raw = fixture("deepseek_score_batch_messy.json");
+    // The hard cases are still present in the recording…
+    assert!(raw.contains("\"id\": \""), "needs a string id");
+    assert!(raw.contains("\"score\": \""), "needs a string score");
+
+    // …and the real parser copes with all of them.
+    let items = parse_score_response(&raw);
+    assert!(!items.is_empty(), "the parser salvaged nothing");
+    assert!(
+        items.iter().all(|i| (0.0..=10.0).contains(&i.score)),
+        "out-of-range scores must be clamped: {:?}",
+        items.iter().map(|i| i.score).collect::<Vec<_>>()
+    );
+    assert!(items.iter().all(|i| i.id > 0), "id-less items are skipped");
+
+    // A response that is not JSON at all degrades to "no scores", never a panic.
+    assert!(parse_score_response("I'm sorry, I can't do that.").is_empty());
+    assert!(parse_score_response("").is_empty());
+}
+
+/// Stage B responses must carry `{id, section, position, lead_story}` with
+/// exactly one lead, and use only palette section names (§3.6).
+#[test]
+fn stage_b_fixture_parses_into_a_lineup() {
+    // The palette from `CurationConfig::default()` (§3.14).
+    let sections = daily_epub::config::CurationConfig::default().sections;
+
+    let picks = parse_selection_response(&fixture("deepseek_lineup.json"));
+    assert!(picks.len() >= 5);
+
+    let mut ids = BTreeSet::new();
+    let mut leads = 0;
+    for pick in &picks {
+        assert!(ids.insert(pick.id), "the same article was picked twice");
+        assert!(
+            sections.contains(&pick.section),
+            "{:?} is not in the configured palette",
+            pick.section
+        );
+        assert!(pick.position >= 1);
+        if pick.lead_story {
+            leads += 1;
+            assert_eq!(
+                pick.section, "Top Stories",
+                "the lead sits in the first section"
+            );
+        }
+    }
+    assert_eq!(leads, 1, "exactly one lead story");
+    // The reserved section is never offered to the model (§3.6, §3.8).
+    assert!(
+        !sections
+            .iter()
+            .any(|s| s == daily_epub::types::WORLD_BRIEFING_SECTION)
+    );
+}
+
+/// Stage C's front-page response must deserialize into a 250–400 word editor's
+/// note plus per-section intros (§3.6).
+#[test]
+fn stage_c_fixture_parses_into_a_front_page() {
+    let response: FrontPageResponse = serde_json::from_str(&fixture("deepseek_front_page.json"))
+        .expect("the front-page fixture must match FrontPageResponse");
+
+    let words = response.from_the_editor.split_whitespace().count();
+    assert!(
+        (150..=450).contains(&words),
+        "From the Editor is {words} words; the prompt asks for 250-400"
+    );
+    assert!(
+        response.from_the_editor.contains("\n\n"),
+        "the prompt asks for 2-4 blank-line separated paragraphs"
+    );
+    assert!(
+        !response.from_the_editor.contains("- "),
+        "no bullet lists on the front page"
+    );
+
+    assert!(response.section_intros.len() >= 2);
+    for (section, intro) in &response.section_intros {
+        let words = intro.split_whitespace().count();
+        assert!(
+            (10..=90).contains(&words),
+            "intro for {section} is {words} words; the prompt asks for 35-60"
+        );
+    }
+}
+
+/// The taste profile is seeded from this file; a broken export would silently
+/// gut the system prompt (§3.6a).
+#[test]
+fn scour_opml_still_yields_the_interest_list() {
+    let interests = profile::parse_interests(&repo("data/scour-interests.opml"))
+        .expect("the shipped OPML must parse");
+    let unique: BTreeSet<String> = interests.iter().map(|n| n.to_lowercase()).collect();
+
+    assert!(
+        unique.len() > 180,
+        "expected ~220 interests, found {}",
+        unique.len()
+    );
+    for expected in [
+        "rust",
+        "boston tech",
+        "e-ink displays",
+        "self-hosted",
+        "sci-fi",
+    ] {
+        assert!(unique.contains(expected), "{expected} disappeared");
+    }
+    assert!(
+        !interests.iter().any(|n| n.contains("token=")),
+        "interest names must not leak the Scour token"
+    );
+
+    // The assembled profile is what actually reaches DeepSeek as the system
+    // prompt; it must mention the stated preferences and the interests (§3.6).
+    let document = profile::build(&interests, profile::NO_LEARNED_ADJUSTMENTS);
+    assert!(document.contains("Rust"));
+    assert!(document.len() > 1000, "the profile is suspiciously short");
+}
+
+/// The binary must migrate a fresh database and advertise the offline
+/// `--skip-llm` path (§2, notes §6).
+#[test]
+fn binary_migrates_and_offers_the_skip_llm_path() {
+    let dir = tempfile::tempdir().expect("tempdir");
+    let db_path = dir.path().join("nested").join("daily-epub.db");
+    let bin = env!("CARGO_BIN_EXE_daily-epub");
+
+    let out = Command::new(bin)
+        .args(["db", "migrate"])
+        .env("DAILY_EPUB_DATABASE_PATH", &db_path)
+        .output()
+        .expect("running `daily-epub db migrate`");
+    assert!(
+        out.status.success(),
+        "db migrate failed: {}",
+        String::from_utf8_lossy(&out.stderr)
+    );
+    assert!(db_path.exists(), "the database was not created");
+
+    // Re-running is idempotent.
+    let out = Command::new(bin)
+        .args(["db", "migrate"])
+        .env("DAILY_EPUB_DATABASE_PATH", &db_path)
+        .output()
+        .expect("re-running `daily-epub db migrate`");
+    assert!(out.status.success());
+
+    let out = Command::new(bin)
+        .args(["generate", "--help"])
+        .output()
+        .expect("running `daily-epub generate --help`");
+    let help = String::from_utf8_lossy(&out.stdout);
+    assert!(out.status.success());
+    assert!(
+        help.contains("--skip-llm"),
+        "generate must expose --skip-llm"
+    );
+    assert!(help.contains("--dry-run"));
+    assert!(help.contains("--max-articles"));
+}
+
+/// An unreachable Miniflux must fail the run cleanly, with the failure recorded
+/// and an error chain a human can act on (§5 verification).
+#[test]
+fn generate_fails_cleanly_when_miniflux_is_unreachable() {
+    let dir = tempfile::tempdir().expect("tempdir");
+    let bin = env!("CARGO_BIN_EXE_daily-epub");
+
+    let out = Command::new(bin)
+        .args([
+            "generate",
+            "--dry-run",
+            "--skip-llm",
+            "--date",
+            "2026-08-15",
+        ])
+        .env("DAILY_EPUB_DATABASE_PATH", dir.path().join("daily-epub.db"))
+        .env("DAILY_EPUB_OUT_DIR", dir.path().join("out"))
+        // Port 1 is reserved and never listening.
+        .env("DAILY_EPUB_MINIFLUX__BASE_URL", "http://127.0.0.1:1")
+        .env("DAILY_EPUB_MINIFLUX__API_KEY", "not-a-real-key")
+        .output()
+        .expect("running `daily-epub generate`");
+
+    assert!(!out.status.success(), "the run must not report success");
+    let stderr = String::from_utf8_lossy(&out.stderr);
+    assert!(
+        stderr.contains("ingesting entries from miniflux"),
+        "the error chain must name the failing stage:\n{stderr}"
+    );
+    assert!(
+        stderr.contains("miniflux") && stderr.contains("127.0.0.1:1"),
+        "the error chain must name the unreachable endpoint:\n{stderr}"
+    );
+    // Nothing was written to the output directory.
+    assert!(
+        !dir.path()
+            .join("out")
+            .join("The Daily EPUB - 2026-08-15.epub")
+            .exists()
+    );
+}
diff --git a/tests/m4_epub.rs b/tests/m4_epub.rs
new file mode 100644
index 0000000..3d19911
--- /dev/null
+++ b/tests/m4_epub.rs
@@ -0,0 +1,278 @@
+//! M4 — a complete issue EPUB, built offline (spec §3.10, §4 M4).
+//!
+//! Everything here is offline: the synthetic issue's images are never
+//! downloaded, so the chapters exercise the placeholder path.
+
+use daily_epub::config::{self, Config};
+use daily_epub::epub::build::fixtures;
+use daily_epub::epub::{self, build};
+use daily_epub::types::{Edition, Issue, Vote};
+use daily_epub::{comments, world};
+
+/// Local file headers store entry names verbatim, so a byte search over the
+/// archive is enough to assert its contents without a zip reader.
+fn contains_entry(zip: &[u8], name: &str) -> bool {
+    zip.windows(name.len()).any(|w| w == name.as_bytes())
+}
+
+/// Read one entry out of the archive, inflating it.
+fn read_entry(zip: &[u8], name: &str) -> String {
+    use std::io::Read as _;
+    let mut archive = zip::ZipArchive::new(std::io::Cursor::new(zip)).expect("zip opens");
+    let mut file = archive.by_name(name).expect("entry exists");
+    let mut out = String::new();
+    file.read_to_string(&mut out).expect("entry is text");
+    out
+}
+
+/// Builds one edition into a temporary directory; the directory is cleaned up
+/// when the returned `TempDir` is dropped.
+fn build_edition_to_bytes(
+    issue: &Issue,
+    edition: Edition,
+) -> (tempfile::TempDir, std::path::PathBuf, Vec<u8>) {
+    let cfg = Config {
+        server: config::ServerConfig {
+            public_url: "https://daily.hallada.net".into(),
+            hmac_secret: Some("integration-secret".into()),
+            ..config::ServerConfig::default()
+        },
+        ..Config::default()
+    };
+    let dir = tempfile::tempdir().expect("tempdir");
+    let artifact = epub::build_edition_with_images(issue, edition, &cfg, dir.path(), &[])
+        .expect("edition builds");
+    let bytes = std::fs::read(&artifact.path).expect("read epub");
+    assert_eq!(artifact.bytes as usize, bytes.len());
+    (dir, artifact.path, bytes)
+}
+
+#[test]
+fn standard_edition_is_a_well_formed_epub3_archive() {
+    let issue = fixtures::issue();
+    let (_dir, path, zip) = build_edition_to_bytes(&issue, Edition::Standard);
+
+    assert_eq!(
+        path.file_name().and_then(|n| n.to_str()),
+        Some("The Daily EPUB - 2026-08-15.epub")
+    );
+    assert_eq!(&zip[0..4], b"PK\x03\x04", "starts with a zip local header");
+    assert_eq!(
+        &zip[30..38],
+        b"mimetype",
+        "`mimetype` must be the first entry"
+    );
+    assert_eq!(&zip[38..58], b"application/epub+zip");
+
+    for entry in [
+        "META-INF/container.xml",
+        "OEBPS/content.opf",
+        "OEBPS/toc.ncx",
+        "OEBPS/nav.xhtml",
+        "OEBPS/stylesheet.css",
+        "OEBPS/cover.png",
+        "OEBPS/cover.xhtml",
+        "OEBPS/front.xhtml",
+        "OEBPS/in-this-issue.xhtml",
+        "OEBPS/sec-top-stories.xhtml",
+        "OEBPS/art-1001.xhtml",
+        "OEBPS/disc-1001.xhtml",
+        "OEBPS/sec-niche-corner.xhtml",
+        "OEBPS/art-1002.xhtml",
+        "OEBPS/world.xhtml",
+        "OEBPS/colophon.xhtml",
+    ] {
+        assert!(contains_entry(&zip, entry), "missing {entry}");
+    }
+}
+
+#[test]
+fn x4_edition_is_built_alongside_the_standard_one() {
+    let issue = fixtures::issue();
+    let (_dir, path, zip) = build_edition_to_bytes(&issue, Edition::X4);
+    assert_eq!(
+        path.file_name().and_then(|n| n.to_str()),
+        Some("The Daily EPUB - 2026-08-15 (X4).epub")
+    );
+    assert_eq!(&zip[30..38], b"mimetype");
+    assert!(contains_entry(&zip, "OEBPS/art-1001.xhtml"));
+    assert!(contains_entry(&zip, "OEBPS/cover.png"));
+}
+
+/// Both editions land in the same BookOrbit library, which lists books by
+/// `dc:title` — so the edition has to be in the title, not just the filename
+/// (§3.10). Without this the two are indistinguishable in the library UI and
+/// over OPDS.
+#[test]
+fn the_two_editions_have_distinct_titles_in_the_opf() {
+    let issue = fixtures::issue();
+    let (_d1, _, standard) = build_edition_to_bytes(&issue, Edition::Standard);
+    let (_d2, _, x4) = build_edition_to_bytes(&issue, Edition::X4);
+
+    let standard_opf = read_entry(&standard, "OEBPS/content.opf");
+    let x4_opf = read_entry(&x4, "OEBPS/content.opf");
+
+    assert!(
+        standard_opf.contains("<dc:title>The Daily EPUB \u{2014} 2026-08-15</dc:title>"),
+        "{standard_opf}"
+    );
+    assert!(
+        x4_opf.contains("<dc:title>The Daily EPUB \u{2014} 2026-08-15 (X4)</dc:title>"),
+        "{x4_opf}"
+    );
+
+    // The series metadata still groups them: same collection, same position, so
+    // they sort together rather than as two unrelated books.
+    for opf in [&standard_opf, &x4_opf] {
+        assert!(opf.contains("belongs-to-collection"), "{opf}");
+        assert!(opf.contains("<dc:date>2026-08-15</dc:date>"), "{opf}");
+    }
+}
+
+#[test]
+fn chapter_ids_hrefs_and_toc_levels_are_stable() {
+    let issue = fixtures::issue();
+    let first =
+        build::render_all(&issue, Edition::Standard, &[], "https://x.test", None).expect("render");
+    let second =
+        build::render_all(&issue, Edition::Standard, &[], "https://x.test", None).expect("render");
+    assert_eq!(first, second, "rendering is deterministic");
+
+    let map: Vec<(String, String, u8)> = first
+        .iter()
+        .map(|c| (c.id.clone(), c.href.clone(), c.toc_level))
+        .collect();
+    assert_eq!(
+        map,
+        vec![
+            ("cover".into(), "cover.xhtml".into(), 1),
+            ("front".into(), "front.xhtml".into(), 1),
+            ("in-this-issue".into(), "in-this-issue.xhtml".into(), 1),
+            ("sec-Top Stories".into(), "sec-top-stories.xhtml".into(), 1),
+            ("art-1001".into(), "art-1001.xhtml".into(), 2),
+            ("disc-1001".into(), "disc-1001.xhtml".into(), 3),
+            (
+                "sec-Niche Corner".into(),
+                "sec-niche-corner.xhtml".into(),
+                1
+            ),
+            ("art-1002".into(), "art-1002.xhtml".into(), 2),
+            ("world".into(), "world.xhtml".into(), 1),
+            ("colophon".into(), "colophon.xhtml".into(), 1),
+        ]
+    );
+}
+
+#[test]
+fn every_chapter_is_parseable_xhtml() {
+    let issue = fixtures::issue();
+    let chapters = build::render_all(
+        &issue,
+        Edition::Standard,
+        &[],
+        "https://daily.hallada.net",
+        Some("integration-secret"),
+    )
+    .expect("render");
+
+    for chapter in &chapters {
+        let xhtml = &chapter.xhtml;
+        assert!(
+            xhtml.starts_with("<?xml version=\"1.0\" encoding=\"utf-8\"?>"),
+            "{} lacks an XML prologue",
+            chapter.id
+        );
+        assert!(xhtml.contains("xmlns=\"http://www.w3.org/1999/xhtml\""));
+        assert!(xhtml.trim_end().ends_with("</html>"));
+        // Undefined XML entities (html5ever's `&nbsp;`) would break XML parsers.
+        assert!(!xhtml.contains("&nbsp;"), "{} has &nbsp;", chapter.id);
+        for tag in ["html", "head", "body", "div", "p", "a", "blockquote"] {
+            let opens = xhtml.matches(&format!("<{tag}")).count();
+            let closes = xhtml.matches(&format!("</{tag}>")).count();
+            assert_eq!(opens, closes, "unbalanced <{tag}> in {}", chapter.id);
+        }
+        // Void elements are self-closed.
+        for void in ["<br>", "<hr>", "<link ", "<meta charset=\"utf-8\">"] {
+            assert!(!xhtml.contains(void) || xhtml.contains("/>"), "{void}");
+        }
+        // Every `&` opens an entity XML actually defines.
+        for (i, _) in xhtml.match_indices('&') {
+            let tail = &xhtml[i + 1..];
+            assert!(
+                is_defined_entity(tail),
+                "bare `&` at byte {i} in {}: {:?}",
+                chapter.id,
+                &xhtml[i..(i + 24).min(xhtml.len())]
+            );
+        }
+    }
+}
+
+/// XML predefines only these five names; everything else must be numeric.
+fn is_defined_entity(after_ampersand: &str) -> bool {
+    let Some(end) = after_ampersand.find(';') else {
+        return false;
+    };
+    let name = &after_ampersand[..end];
+    if matches!(name, "amp" | "lt" | "gt" | "quot" | "apos") {
+        return true;
+    }
+    match name.strip_prefix('#') {
+        Some(rest) => match rest.strip_prefix('x').or_else(|| rest.strip_prefix('X')) {
+            Some(hex) => !hex.is_empty() && hex.chars().all(|c| c.is_ascii_hexdigit()),
+            None => !rest.is_empty() && rest.chars().all(|c| c.is_ascii_digit()),
+        },
+        None => false,
+    }
+}
+
+#[test]
+fn rating_links_carry_the_spec_token() {
+    let issue = fixtures::issue();
+    let chapter = build::render_all(
+        &issue,
+        Edition::Standard,
+        &[],
+        "https://daily.hallada.net",
+        Some("integration-secret"),
+    )
+    .expect("render")
+    .into_iter()
+    .find(|c| c.id == "art-1001")
+    .expect("article chapter");
+
+    let date = issue.meta.date;
+    let up = build::rating_token("integration-secret", date, 1, Vote::Up);
+    let down = build::rating_token("integration-secret", date, 1, Vote::Down);
+    assert_eq!(up.len(), 16);
+    assert_ne!(up, down);
+    assert!(chapter.xhtml.contains(&format!(
+        "https://daily.hallada.net/r/2026-08-15/1/up?t={up}"
+    )));
+    assert!(chapter.xhtml.contains(&format!(
+        "https://daily.hallada.net/r/2026-08-15/1/down?t={down}"
+    )));
+}
+
+#[test]
+fn comment_and_world_fixtures_feed_real_chapters() {
+    let hn: serde_json::Value = serde_json::from_str(
+        &std::fs::read_to_string(concat!(
+            env!("CARGO_MANIFEST_DIR"),
+            "/tests/fixtures/hn_item.json"
+        ))
+        .expect("fixture"),
+    )
+    .expect("json");
+    let thread = comments::parse_hn(&hn).expect("thread");
+    assert_eq!(thread.total_comments, 4);
+
+    let html = std::fs::read_to_string(concat!(
+        env!("CARGO_MANIFEST_DIR"),
+        "/tests/fixtures/wikipedia_current_events.html"
+    ))
+    .expect("fixture");
+    let body = world::extract_events(&html).expect("events");
+    assert!(body.contains("<li>"));
+    assert!(!body.contains("<a "));
+}
diff --git a/tests/m7_server.rs b/tests/m7_server.rs
new file mode 100644
index 0000000..155b3b0
--- /dev/null
+++ b/tests/m7_server.rs
@@ -0,0 +1,289 @@
+//! M7/M8 integration: drive the real `daily-epub serve` binary over TCP.
+//!
+//! The crate has no library target, so this file cannot link the crate's modules
+//! (the endpoint-level tests over `server::router` live in `src/server.rs`).
+//! What it *can* do — and what nothing else covers — is prove that the shipped
+//! binary boots from `DAILY_EPUB_*` configuration, migrates its database, and
+//! answers the spec's routes on a real socket, exactly as the systemd unit runs it
+//! (spec §3.12, §3.15).
+//!
+//! Only std + dev-dependencies are available here, so the HTTP client below is a
+//! hand-rolled `GET`.
+
+use std::io::{Read, Write};
+use std::net::{TcpListener, TcpStream};
+use std::path::Path;
+use std::process::{Child, Command, Stdio};
+use std::time::{Duration, Instant};
+
+/// Shared fixture vector, mirrored by the unit tests in `src/server.rs`:
+/// `hex(hmac_sha256("test-secret", "2026-08-15/42/up"))[..16]`.
+const SECRET: &str = "test-secret";
+const TOKEN_UP_ARTICLE_42: &str = "3b314cf7e6d8f50f";
+/// base64("opds:hunter2")
+const BASIC_AUTH: &str = "b3BkczpodW50ZXIy";
+
+struct Server {
+    child: Child,
+    port: u16,
+    dir: tempfile::TempDir,
+}
+
+impl Drop for Server {
+    fn drop(&mut self) {
+        let _ = self.child.kill();
+        let _ = self.child.wait();
+    }
+}
+
+impl Server {
+    fn start(basic_auth: bool) -> Server {
+        let dir = tempfile::tempdir().expect("tempdir");
+        let xtc_dir = dir.path().join("xtc");
+        std::fs::create_dir_all(&xtc_dir).expect("xtc dir");
+        let log = std::fs::File::create(dir.path().join("server.log")).expect("log file");
+
+        let port = free_port();
+        let mut cmd = Command::new(env!("CARGO_BIN_EXE_daily-epub"));
+        cmd.arg("serve")
+            // cwd must not contain the repo's config.toml.
+            .current_dir(dir.path())
+            .env_clear()
+            .env("PATH", std::env::var("PATH").unwrap_or_default())
+            .env("RUST_LOG", "warn")
+            .env("DAILY_EPUB_DATABASE_PATH", dir.path().join("daily-epub.db"))
+            .env("DAILY_EPUB_SERVER__BIND", format!("127.0.0.1:{port}"))
+            .env("DAILY_EPUB_SERVER__HMAC_SECRET", SECRET)
+            .env(
+                "DAILY_EPUB_SERVER__PUBLIC_URL",
+                format!("http://127.0.0.1:{port}"),
+            )
+            .env("DAILY_EPUB_PUBLISH__XTC_DIR", &xtc_dir)
+            .env(
+                "DAILY_EPUB_PUBLISH__BOOKORBIT_DIR",
+                dir.path().join("bookorbit"),
+            )
+            .stdout(Stdio::null())
+            .stderr(Stdio::from(log));
+        if basic_auth {
+            cmd.env("DAILY_EPUB_SERVER__BASIC_AUTH_USER", "opds")
+                .env("DAILY_EPUB_SERVER__BASIC_AUTH_PASS", "hunter2");
+        }
+        let child = cmd.spawn().expect("spawning daily-epub serve");
+
+        let server = Server { child, port, dir };
+        server.wait_until_ready();
+        server
+    }
+
+    fn xtc_dir(&self) -> std::path::PathBuf {
+        self.dir.path().join("xtc")
+    }
+
+    fn wait_until_ready(&self) {
+        let deadline = Instant::now() + Duration::from_secs(30);
+        while Instant::now() < deadline {
+            if let Some(res) = try_get(self.port, "/healthz", None)
+                && res.status == 200
+            {
+                return;
+            }
+            std::thread::sleep(Duration::from_millis(50));
+        }
+        let log = std::fs::read_to_string(self.dir.path().join("server.log")).unwrap_or_default();
+        panic!(
+            "daily-epub serve never became healthy on port {}:\n{log}",
+            self.port
+        );
+    }
+
+    fn get(&self, path: &str) -> HttpResponse {
+        try_get(self.port, path, None).expect("request failed")
+    }
+
+    fn get_auth(&self, path: &str, credentials: &str) -> HttpResponse {
+        try_get(self.port, path, Some(credentials)).expect("request failed")
+    }
+}
+
+#[derive(Debug)]
+struct HttpResponse {
+    status: u16,
+    headers: String,
+    body: String,
+}
+
+impl HttpResponse {
+    fn header(&self, name: &str) -> Option<&str> {
+        let name = format!("{}:", name.to_ascii_lowercase());
+        self.headers
+            .lines()
+            .find(|l| l.to_ascii_lowercase().starts_with(&name))
+            .and_then(|l| l.split_once(':'))
+            .map(|(_, v)| v.trim())
+    }
+}
+
+fn free_port() -> u16 {
+    let listener = TcpListener::bind("127.0.0.1:0").expect("ephemeral port");
+    let port = listener.local_addr().expect("local addr").port();
+    drop(listener);
+    port
+}
+
+/// A minimal HTTP/1.1 `GET`; `None` when the connection could not be made.
+fn try_get(port: u16, path: &str, credentials: Option<&str>) -> Option<HttpResponse> {
+    let mut stream = TcpStream::connect(("127.0.0.1", port)).ok()?;
+    stream
+        .set_read_timeout(Some(Duration::from_secs(10)))
+        .ok()?;
+    let auth = credentials
+        .map(|c| format!("Authorization: Basic {c}\r\n"))
+        .unwrap_or_default();
+    let request =
+        format!("GET {path} HTTP/1.1\r\nHost: 127.0.0.1:{port}\r\nConnection: close\r\n{auth}\r\n");
+    stream.write_all(request.as_bytes()).ok()?;
+    stream.flush().ok()?;
+    // No half-close here: hyper drops a connection whose peer has shut down its
+    // write side before the response is written. `Connection: close` is enough.
+
+    let mut raw = Vec::new();
+    stream.read_to_end(&mut raw).ok()?;
+    let text = String::from_utf8_lossy(&raw).into_owned();
+    let (head, body) = text.split_once("\r\n\r\n")?;
+    let status = head
+        .lines()
+        .next()?
+        .split_whitespace()
+        .nth(1)?
+        .parse()
+        .ok()?;
+    Some(HttpResponse {
+        status,
+        headers: head.to_string(),
+        body: body.to_string(),
+    })
+}
+
+#[test]
+fn binary_serves_health_issues_and_rating_endpoints() {
+    let server = Server::start(false);
+
+    let res = server.get("/healthz");
+    assert_eq!(res.status, 200);
+    assert_eq!(res.body, "ok");
+
+    // Migrations ran on startup, so `issues.json` answers with an empty list.
+    let res = server.get("/issues.json");
+    assert_eq!(res.status, 200);
+    assert_eq!(
+        res.header("content-type"),
+        Some("application/json"),
+        "{}",
+        res.headers
+    );
+    assert_eq!(res.body.trim(), "[]");
+
+    // A tampered token never reaches the database.
+    let res = server.get("/r/2026-08-15/42/up?t=deadbeefdeadbeef");
+    assert_eq!(res.status, 403);
+    assert!(res.body.contains("Invalid link"), "{}", res.body);
+
+    // The shared HMAC vector verifies, but article 42 does not exist here.
+    let res = server.get(&format!("/r/2026-08-15/42/up?t={TOKEN_UP_ARTICLE_42}"));
+    assert_eq!(res.status, 404, "token vector no longer verifies: {res:?}");
+    assert!(res.body.contains("Unknown article"), "{}", res.body);
+
+    // The confirmation pages stay e-ink sized and self contained (§3.9).
+    assert!(res.body.len() < 1024, "page is {} bytes", res.body.len());
+    assert!(!res.body.contains("<link"));
+
+    // Malformed date / vote are rejected before any lookup.
+    assert_eq!(
+        server
+            .get(&format!("/r/nope/42/up?t={TOKEN_UP_ARTICLE_42}"))
+            .status,
+        400
+    );
+    assert_eq!(
+        server
+            .get(&format!("/r/2026-08-15/42/maybe?t={TOKEN_UP_ARTICLE_42}"))
+            .status,
+        400
+    );
+    assert_eq!(server.get("/nope").status, 404);
+}
+
+#[test]
+fn binary_serves_opds_and_files_behind_basic_auth() {
+    let server = Server::start(true);
+    let name = "The Daily EPUB - 2026-08-15 (X4).xtch";
+    write(&server.xtc_dir().join("xtc.xml"), FEED);
+    write(&server.xtc_dir().join(name), "XTCH");
+    write(&server.dir.path().join("secret"), "top secret");
+
+    // No credentials → challenge.
+    let res = server.get("/opds/xtc.xml");
+    assert_eq!(res.status, 401);
+    assert_eq!(
+        res.header("www-authenticate"),
+        Some("Basic realm=\"The Daily EPUB\", charset=\"UTF-8\"")
+    );
+    assert_eq!(server.get_auth("/opds/xtc.xml", "bm9wZTpub3Bl").status, 401);
+
+    // Correct credentials → the feed, typed as OPDS.
+    let res = server.get_auth("/opds/xtc.xml", BASIC_AUTH);
+    assert_eq!(res.status, 200);
+    assert!(
+        res.header("content-type")
+            .unwrap_or_default()
+            .starts_with("application/atom+xml"),
+        "{}",
+        res.headers
+    );
+    assert!(res.body.contains("opds-spec.org/acquisition"));
+
+    // The acquisition link in the feed resolves to the file itself.
+    let res = server.get_auth(
+        "/files/xtc/The%20Daily%20EPUB%20-%202026-08-15%20%28X4%29.xtch",
+        BASIC_AUTH,
+    );
+    assert_eq!(res.status, 200);
+    assert_eq!(res.body, "XTCH");
+    assert_eq!(res.header("content-type"), Some("application/octet-stream"));
+
+    // Path traversal, percent-encoded so the URL parser cannot normalize it away.
+    for attack in [
+        "/files/xtc/..%2Fsecret",
+        "/files/xtc/%2e%2e%2fsecret",
+        "/files/xtc/%2Fetc%2Fpasswd",
+    ] {
+        let res = server.get_auth(attack, BASIC_AUTH);
+        assert_eq!(res.status, 400, "{attack} was not rejected: {res:?}");
+        assert!(!res.body.contains("top secret"));
+    }
+    // Unauthenticated traversal is refused before the path is even looked at.
+    assert_eq!(server.get("/files/xtc/..%2Fsecret").status, 401);
+
+    // /healthz stays open so the reverse proxy can probe it.
+    assert_eq!(server.get("/healthz").status, 200);
+}
+
+fn write(path: &Path, body: &str) {
+    std::fs::write(path, body).unwrap_or_else(|e| panic!("writing {}: {e}", path.display()));
+}
+
+/// A feed shaped like the one `publish::write_xtc_opds` generates.
+const FEED: &str = r#"<?xml version="1.0" encoding="utf-8"?>
+<feed xmlns="http://www.w3.org/2005/Atom">
+  <id>urn:daily-epub:xtc</id>
+  <title>The Daily EPUB — XTC editions</title>
+  <updated>2026-08-15T05:40:00Z</updated>
+  <entry>
+    <title>The Daily EPUB — 2026-08-15</title>
+    <id>urn:daily-epub:xtc:x</id>
+    <updated>2026-08-15T05:40:00Z</updated>
+    <link rel="http://opds-spec.org/acquisition" href="http://127.0.0.1/files/xtc/x.xtch" type="application/octet-stream" length="4"/>
+  </entry>
+</feed>
+"#;
diff --git a/xtc-settings.example.json b/xtc-settings.example.json
new file mode 100644
index 0000000..14ad6eb
--- /dev/null
+++ b/xtc-settings.example.json
@@ -0,0 +1,20 @@
+{
+  "device": "xteink-x4",
+  "width": 480,
+  "height": 800,
+  "font": {
+    "path": "/usr/share/fonts/truetype/ibm-plex/IBMPlexSerif-Regular.ttf",
+    "size": 30,
+    "weight": 400
+  },
+  "margins": { "left": 16, "top": 16, "right": 16, "bottom": 16 },
+  "lineHeight": 120,
+  "textAlign": "justify",
+  "hyphenation": { "enabled": true, "language": "en" },
+  "output": {
+    "format": "xtch",
+    "dithering": true,
+    "ditherStrength": 0.7,
+    "negative": false
+  }
+}