root d7f9bde5e9 feat(api): karakeep webhook (HMAC-verified) ...

POST /api/ingest/karakeep accepts Karakeep webhook payloads. HMAC
signature on the raw body captured by express.json's verify hook.
Mounted on app before mountApi so it bypasses agentOrOwner — the
shared secret IS the auth.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-01 03:55:57 +10:00

1.3 KiB

Raw Blame History

View Raw