internal/

Package appicon holds the application's branded icon assets, embedded into the binary so the app can set its dock / taskbar icon and a menu-bar tray icon without shipping loose files.

Package biometric gates a sensitive action behind the platform's owner check — Touch ID, or the device password — so a self-signed build can protect the vault read without a keychain entitlement.

Package browsercookies imports authentication cookies straight from a locally installed browser, so the reader can pick up a session the user already established by logging in normally — no API app registration, no manual copy-paste of an opaque token.

Package feedstore persists a source.FeedCache's entries to disk — one small JSON file per subscription — so relaunching the reader serves each feed's last posts and skips re-fetching what is still fresh, instead of hitting every source again on startup.

Package httplog records the HTTP exchanges the aggregator's providers make so they can be inspected in-app (the Network log tab).

secrets.go moves the reader's account secrets (session cookies, access tokens, passwords, API keys) off the settings.json file and into the host's native credential vault — macOS Keychain, Windows Credential Manager or the Linux Secret Service — through the pure-Go, CGO-free cross-platform façade github.com/go-keyring/keyring.

Package viewmodel holds the news reader's core UI state as go-widgets/mvvm primitives — the "ViewModel" layer of an MVVM split.

Package webrender renders a web page (the external target of a feed item) into an image, using the pure-Go go-webengine (CGO=0, no Chromium).

Package windowapp adapts an *app.App to the window.Handler contract: it exposes the app's double-buffered framebuffer to a native presenter and routes native mouse/scroll/key events into the ui.Scene.