core: v1.0.0

1.0.0 (2026-07-05)

Features

• accept WebSub-native publish to trigger fan-out (8a81963)
• add realtime log page and improved test infrastructure (0e5ac48)
• core: add @rsscloud/core interface contracts (3d46f8f)
• core: add async-202 accept seam for WebSub subscriptions (169b2d6)
• core: add file-backed Store adapter (2acf6b0)
• core: add REST front door dispatcher (d20905a)
• core: add SSRF egress guard for outbound fetches (0e57cf8)
• core: add xml-rpc rssCloud plugin and dispatcher (7364a71)
• core: expose the change-window size on Stats (2501d74)
• core: implement REST-capable rssCloud engine (51273d2)
• core: parse and validate WebSub hub.* subscribe requests (9435356)
• core: persist the domain model as a versioned v2 file format (f678d2b)
• core: verify WebSub subscriber intent with a challenge GET (8789847)
• distribute feed content to WebSub subscribers on fan-out (9615369)
• honor WebSub lease requests, clamped to configured bounds (7328aef)
• intent-verify WebSub unsubscribe before removal (70b7d65)
• sign WebSub deliveries with X-Hub-Signature (7f3349e)
• wire the WebSub subscribe front door (core dispatcher + express) (c15c0ea)

Bug Fixes

• core: absorb synchronous throws in the verification scheduler (aa46dcb)
• core: bound rssCloud REST notify redirects to prevent loops (c08b174)
• core: bound WebSub delivery redirects to prevent loops (703b2fd)
• core: fail WebSub delivery when the hub URL is unconfigured (ce1c4c7)
• core: match dispatcher wire messages to the rssCloud contract (bc87b3c)
• core: preserve caller abort signal in safeFetch timeout path (2ae15ef)
• core: reject non-URL hub.topic/hub.url with a synchronous 400 (e43a7a4)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @rsscloud/xml-rpc bumped to 1.0.0