5d81c2a480
POST /api/collab/avatar resolves a roster participant key to image bytes via the daemon's public-only HTTPS client, so the browser never sees signed CDN URLs. The handler lives on the connection thread beside the account avatar proxy (bounded IO stays off the editor mutex) and stands in for the desktop's frame-loop avatar pump. VS Code's daemon contract test now pins the /api/collab auth gate (401 bare, 200 with the managed token), and the crate map documents the collab-host split. Browser-side consumption needs an avatarRevision on the participant wire and an install seam in collab_avatar_runtime; until then web participants keep the initials fallback. |
||
|---|---|---|
| .. | ||
| op-chrome-extension | ||
| op-vscode | ||
| op-web-sdk | ||
| op-web-sdk-react | ||
| op-web-sdk-vue | ||
| scripts | ||
| .oxfmtrc.json | ||
| .oxlintrc.json | ||
| .prettierignore | ||
| bun.lock | ||
| CLAUDE.md | ||
| package.json | ||