- Shipped
- November 13, 2026 at 8:58 AM UTC
- Author
- Kamo
- Commit
- 6d4137d
Member API /api/docs/doc-shares/**: picker (Recent / My Docs / Shared With Me / Team / Materials, server-side name search, thumbnails, Antivirus scan fields, canShare), plan (the Access Check matrix: recipients classified as TEAM_MEMBER / MEMBER / CONTACT / LEAD_CONTACT / EXTERNAL by three org-scoped scalar queries; HumanShareGate per doc over every recipient; Antivirus; LOAN/VAULT, issued packages and HR documents to non-team refused; Editor only by the owner), issue (one hashed link per doc via DocLinkTokens + a grant per recipient on img_shares with SW_EMAIL/SW_MEMBER, source/sourceRef/linkId; Never Expires = NULL expires_at; org policy + SHARE_DOCS_EXTERNALLY / SHARE_DOCS_ANYONE_LINK enforced; URL on sign.<live org domain or platform>), by-doc, PATCH/DELETE links, revoke-source, requests + decide, views (sharer and reporting line only), external-access + revoke-domain, settings GET/PUT (CONTRACT 1f defaults when no row), claim (session only, no right or entitlement), member thumbnails. Internal twins **************** for EmailService (orgId/actorMemberId/channel in the body, KamoAI secret); issue links carry docName/mime/pages/size and, for Anyone links, a public thumbUrl on the sign host. Public **************** resolve (token org must equal the sign host's org; platform sign hosts serve every org), every DocViewState, VERIFIED = member of the sharing org whose proved address or member id holds a live grant (or who can open it in Doc Manager), view sessions + link counters; /content with Range and private, no-store (rendition=pdf for the converted PDF), /page/{n}?w= rendered with PDFBox from a temp file (2 slots per pod), /thumb/{n}, view beacons into doc_view_sessions/pages, request-access. Antivirus 423 -> CHECKING / UNAVAILABLE, 410 -> UNAVAILABLE. Patient charts PHI-audited. NATS docs.share.viewed.<org> (first per session) and **************** DOC_VIEWED / DOC_ACCESS_REQUESTED / DOC_ACCESS_DECIDED through EmailService /api/internal/notifications. Doc Manager Shared With Me now includes department, job-title and claimed or proved-address grants and drops revoked ones.