1 Commits

Author	SHA1	Message	Date
root	d7f9bde5e9	feat(api): karakeep webhook (HMAC-verified) ... POST /api/ingest/karakeep accepts Karakeep webhook payloads. HMAC signature on the raw body captured by express.json's verify hook. Mounted on app before mountApi so it bypasses agentOrOwner — the shared secret IS the auth. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-06-01 03:55:57 +10:00