- Shipped
- August 7, 2026 at 6:52 AM UTC
- Author
- kamo
- Commit
- 4276b92
The sender had no route to the finished document at all. EnvelopeSummary advertised a signedDocumentUrl pointing inside the kamo-signer app's own BFF, authenticated by a signer session — so the only person who could ever fetch what came back was the last signer, for four hours. Adds the OTK proxy route and a download action on every completed envelope. The dialog also sent routingOrder 1, 2, 3…, which LOOKED ordered and was never enforced. ESigService enforces it now, so the choice is explicit: Any order (everyone invited together, today's behaviour and the default) or One at a time. Refusals now show their reason instead of "Action failed" — ESigService states them in words and they were being thrown away — and resend/void are hidden where the service would only ever 409.