Dorian f94f5da6ee feat(mesh): /api/share-to-mesh iframe intent endpoint (Phase 3c) ...

Marketplace app iframes (Penpot, Gitea, IndeedHub, ...) can POST a file
to /api/share-to-mesh and postMessage the returned CID to the parent
window. The endpoint mirrors /api/blob's body format but adds CORS for
the requesting app origin (any port on host_ip) so proxied apps can
reach it with credentials:'include'. Session cookie is still the primary
auth; the origin check is a sanity guard.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 12:58:03 -04:00

..

src

feat(mesh): /api/share-to-mesh iframe intent endpoint (Phase 3c)

2026-04-13 12:58:03 -04:00

tests

feat: BIP-39 master seed for unified key derivation

2026-03-31 01:41:24 +01:00

Cargo.toml

chore: bump version to 1.3.5

2026-04-11 09:38:45 -04:00