- Shipped
- October 18, 2026 at 8:14 PM UTC
- Author
- Kamo
- Commit
- 89351b3
Eight esign_* tools (EsignPack) through a new ESIG(OTK) door to ESigService's staff API, as the SI member; ESigService checks every right itself (SITP TP02) and bounds templates and envelopes by the session's clearance (esigservice@2533b2d): - esign_get_template (by its docs_list_templates documentId or templateUid: signer slots in order, pinned names/addresses), esign_list_envelopes (filtered, paged, newest first), esign_get_envelope (each signer's progress, decoder/delegation reasons cut), esign_list_requests (a record's Signature Requests tab with buckets and whether a reminder can go): VIEW_DOCUMENTS; untrusted. - esign_send: EDIT_DOCUMENTS, SHARE_DOCUMENT_EXTERNAL (a person approves an SI's own initiative), ad hoc only, signers fill the slots in order (inOrder = one routing tier each), outside addresses pass the outreach gate; refused before approval when it names more signers than the template has slots. - esign_nudge and esign_resend: SEND_EXTERNAL_EMAIL, or SEND_INTERNAL_EMAIL when every address is the organization's; a cooling-down or finished signer is refused before anyone is asked. esign_void: DELETE_RECORD; the outstanding signers read the reason. Signing an envelope oneself and template authoring are never built. Guards: the esign_ prefix, ContentReadTools, DisclosingTools (send and void disclose), CollabTools, catalogue counts; the tools/list snapshots grow by exactly these tools.