- Shipped
- November 15, 2026 at 5:58 AM UTC
- Author
- Kamo
- Commit
- 5d635bc
- Sign-In Methods: Join By Company Email card (OFF by default; Team Member joins active / Member; the org's ownership-verified domains read-only with Add A Domain -> /setup/dns; safety rule), saved with the policy PUT (domainJoinEnabled, domainJoinMemberType; verifiedDomains read). Older servers: calm 'on its way', switch locked. - Settings > Security > Invite Links (MANAGE_SIGN_IN_METHODS; menu + landing card): cards with QR, uses meter, expiry, creator (MemberChipById when an id is sent), last used; Working/Stopped/All; create dialog (name, Member/Team Member, start active, how many, expiry, live summary) -> Your Link Is Ready; Copy, Download QR (printable poster PNG), Share, Stop This Link (confirm; never deleted). Relay app/api/security/org-invites. - Behavior & Labeling > Sign-In Page: front-door links (<=6, reorder, kamo-login safeLink rules, smart https/mailto/ tel coercion) + sign-in notice (tone, link, start/end) with a live picture of kamo-login's NoticeCard and FrontDoorLinks. Relay **************** (SS re-provisions the theme). - /validate: after the OTK is spent, a parked paid plan (query plan/code/universe or apex sp_checkout_* cookies, one-shot, cleared on .<apex>) goes to www.<apex>/subscribe, a free non-Business universe to /network/create; an explicit next keeps winning; nothing parked = unchanged. app/lib/planCheckout.ts ports kamo-login's rules. - Every 404/501 renders 'not available yet'; help mark on every control; KB article sections added.