This branch simplifies the existing reader by removing social features and discovery. It does not yet implement every v1 requirement; the boundary between retained behavior and future work lives in SPEC.md.

Prerequisites #

Go (matching go.mod)
bun ≥ 1.3
air — Go live-reload
mprocs — runs the dev processes side-by-side
goose and sqlc

Install the Go CLIs once:

go install github.com/air-verse/air@latest
go install github.com/pressly/goose/v3/cmd/goose@latest
go install github.com/sqlc-dev/sqlc/cmd/sqlc@latest

Setup #

cp .env.example .env           # fill in signing and session keys documented there
bun install --cwd ./frontend
make migrate-up

Generate an OAuth signing key:

openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-256 | openssl base64 -A

Run #

make dev

Starts processes via mprocs.yaml:

Server — air rebuilds and runs cmd/api on $PORT (default :8000). Autostart.
Vite — bun run --cwd ./frontend dev on :5173. Autostart.
Tests — go test ./.... Manual-start.

In APP_ENV=local, the Go server reverse-proxies / to the Vite dev server (HMR works). In any other env it serves frontend/dist from the embedded FS (frontend/embed.go). Open http://127.0.0.1:8000 — same origin keeps /api/* cookies and CSRF sane, and the loopback origin doubles as your OAuth client_id.

make run starts Go + Vite without mprocs if you'd rather use your own terminal layout.

OAuth #

Local dev uses a loopback client: client_id is http://localhost, callback is http://127.0.0.1:8000/oauth/callback, and the AS skips the client-metadata fetch entirely. Leave BLUESKY_CLIENT_ID and BLUESKY_REDIRECT empty in .env and sign in straight from http://127.0.0.1:8000 — no tunnel, no public hostname.

For prod, set both env vars to your public URLs and serve oauth-client-metadata.json + oauth-jwks.json from that origin.

Scopes #

The retained OAuth scopes are configured in .env.example and checked in internal/oauth/scopes/. Standardfeed subscription writes require their own grant. Sessions without it still work for RSS, but a Standardfeed write prompts a fresh sign-in. The existing Morgenblau permission set stays unchanged for lexicon compatibility; sharing and following have no runtime feature in v1.

Database #

SQLite via the pure-Go modernc.org/sqlite driver — the DB file lives at $DB_PATH (default ./data/morgenblau.db) and is created on first open. WAL mode, foreign keys on, and a 5s busy timeout are set via DSN pragmas. Plain SQL, no ORM. Migrations live in internal/database/migrations/, handwritten queries in internal/database/queries/, generated code in internal/database/db/.

The simplified migration baseline requires a fresh local database. Before starting this branch against an older checkout's data, stop the server and point DB_PATH at a new file, then run make migrate-up. Sign in again to reconcile retained subscriptions and saves from the PDS; feed content is fetched again. Existing external share and follow records remain untouched.

make migrate-up                       # apply pending migrations
make migrate-down                     # roll back one
make migrate-status                   # show applied/pending
make migrate-create NAME=add_users    # scaffold a new SQL migration
make sqlc                             # regenerate queries after edits

Build & test #

make build                          # build frontend + Go binary for the host OS → ./main
make build-linux                    # cross-compile a static Linux binary for deploy → ./main-linux-amd64
make build-linux GOARCH=arm64       # same, for ARM VPSes (Hetzner CAX, AWS Graviton, …)
make test                           # go test ./... -v

build and build-linux both run the frontend build first (bun run build in frontend/) and embed the resulting frontend/dist/ into the binary via //go:embed. The deploy binary is fully self-contained — scp main-linux-amd64 to the VPS, set env vars, and run.

Git & PRs #

GitHub is the source of truth; Tangled is a read-only mirror. Open pull requests on GitHub.

Local pushes reach both forges through origin. After merging a pull request in GitHub, run scripts/sync-tangled.sh to update Tangled's main branch.

Clone this repository

Morgenblau #