- Shipped
- November 13, 2026 at 8:30 AM UTC
- Author
- Kamo
- Commit
- 71441ab
The viewer for doc links sent from mail. Server-rendered and branded in the first paint (org logo, brand colour, wallpaper, tab icon); resolves the token against DocsService's public doc-link API in-cluster with X-Forwarded-Host, exactly as the quote page calls SecurityService, so a token from another org answers UNAVAILABLE. - PDF (and Office via ?rendition=pdf) through @kamo/doc-render PdfPages with a pdf.js text layer: page-thumbnail rail, zoom, fit, fullscreen, find-in-document with "3 of 36" navigation, keyboard nav; image, video, audio, text and CSV renderers over the Range-capable /content proxy; a download card for everything else. - Download / Print only when the link permits; watermark overlay; the subtle "{Org} can see when this document is viewed." footer. - View beacons: per-page seconds while visible, debounced, sendBeacon on hide. - Honest pages for every state: sign in, no access, expired, revoked, checking (auto-retry), unavailable, signature required, and UNREACHABLE when DocsService does not answer (backoff retry) - a 404/503 never crashes the page. - Request Access inline and at /<locale>/d/<token>/request. - Member handoff **************** spends the sign-in one-time key like kamo-internal's /validate, keeps the *** behind an HttpOnly host cookie, forwards it as X-Kamo-Member-Session, and POSTs /api/docs/doc-shares/claim. - Bytes are private/no-store, sandboxed by CSP, and anything not inline-safe is served as an attachment. @kamo/doc-render 0.1.2: textLayer, searchQuery/activeMatch, onDocument, countMatches.