root d7f9bde5e9 feat(api): karakeep webhook (HMAC-verified) ...

POST /api/ingest/karakeep accepts Karakeep webhook payloads. HMAC
signature on the raw body captured by express.json's verify hook.
Mounted on app before mountApi so it bypasses agentOrOwner — the
shared secret IS the auth.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-01 03:55:57 +10:00

..

ai

feat(ai): ollama embed-text wrapper

2026-06-01 03:43:27 +10:00

api

feat(api): karakeep webhook (HMAC-verified)

2026-06-01 03:55:57 +10:00

auth

feat(auth): owner-only middleware for single-user bearer auth

2026-05-31 11:06:21 +10:00

db

feat(search): hybrid FTS + vector with RRF + graceful Ollama fallback

2026-06-01 03:50:33 +10:00

ingest

fix(ingest): pin resolved IP into safe_fetch to defeat DNS-rebinding

2026-06-01 03:48:52 +10:00

jobs

feat(jobs): ingest.karakeep worker

2026-06-01 03:55:03 +10:00

karakeep

feat(karakeep): bookmark fetch client

2026-06-01 03:54:21 +10:00

log.js

chore: node project init + deps + logger

2026-05-31 01:24:41 +10:00