Popular on this server; changelog follows Keep a Changelog; 0.3.0

- Add feed lists what other accounts subscribe to, most subscribers
  first, and subscribes you by id (GET /api/popular, POST
  /api/popular/{id}). Rows never carry a URL. Feeds from an OPML and
  anything that looks private (a login, credentials in the URL, a key
  such as auth= or token=) are never listed, and the subscribe route
  checks the id against the same list.
- CHANGELOG.md follows Keep a Changelog 1.1.0: 0.1.0 (2026-09-09, the
  CLI), 0.2.0 (2026-09-10, the web UI), 0.3.0 (2026-09-11, accounts and
  sharing). The long-form entries moved unchanged to docs/history.md.
- Cargo.toml is 0.3.0. CLAUDE.md says how to add an entry and cut a
  release.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016HdTEWQNrzyFULijigkmMn

web/index.html

@@ -1142,9 +1142,12 @@ $('#addFeed').onclick=()=>{
     <div class="field"><label>Folder (optional)</label><input type="text" id="nfolder" placeholder="Defaults to the feed title"></div>
     <div class="field"><label>Keywords (optional, comma separated)</label>
       <input type="text" id="nkw"><span class="hint">Only items matching a keyword are downloaded.</span></div>
+    <div class="field"><label>Popular on this server</label>
+      <div class="childlist" id="popular"><p class="hint">Loading…</p></div></div>
     <div class="cardacts"><button class="btn" onclick="closeModal()">Cancel</button>
       <button class="btn primary" id="nsave">Add feed</button></div>`);
   $('#nurl').focus();
+  showPopular();
   $('#nsave').onclick=async()=>{
     const url=$('#nurl').value.trim(); if(!url) return;
     $('#nsave').textContent='Adding…'; $('#nsave').disabled=true;
@@ -1158,6 +1161,31 @@ $('#addFeed').onclick=()=>{
   };
 };
 
+// What other people here read, as a place to start. The rows carry an id, never a URL, so a
+// key in someone's feed address never reaches this page.
+async function showPopular(){
+  const box=$('#popular');
+  let rows=[];
+  try{ rows=await api('/api/popular')||[]; }catch{}
+  box.innerHTML=rows.length?'':'<p class="hint">Nothing yet. Feeds other people here subscribe to show up here.</p>';
+  for(const p of rows){
+    const el=document.createElement('div');
+    el.className='childrow';
+    el.innerHTML=artHTML(p.image,p.title||p.id)+
+      `<div class="txt"><b>${esc(p.title||p.id)}</b>`+
+      `<small class="meta">${p.subscribers} subscriber${p.subscribers===1?'':'s'}</small></div>`+
+      `<button class="btn" data-a="sub">Subscribe</button>`;
+    $('[data-a="sub"]',el).onclick=async()=>{
+      try{
+        await api(`/api/popular/${encodeURIComponent(p.id)}`,{method:'POST'});
+        closeModal(); toast(`Subscribed to ${p.title||p.id}`);
+        await loadFeeds(true); selectFeed(p.id);
+      }catch(e){ toast(e.message,true); }
+    };
+    box.appendChild(el);
+  }
+}
+
 let expanded = new Set(JSON.parse(localStorage.getItem('ipx.expanded')||'[]'));
 function toggleGroup(id){
   expanded.has(id) ? expanded.delete(id) : expanded.add(id);