Co-borrower requests and phone capture links, borrower saves as true PATCH, and document readings that say which page they came from

Shipped

November 11, 2026 at 11:13 AM UTC

Author

Kamo

Commit

270dc34

- MicroActionService + PortalMicroActionController (/portal/micro/{token}): a signed, single-use link. A request to the other borrower (confirm income, check details, add a document) goes to THEIR own email or phone and shows nothing until the one-time code sent to them is entered (salted hash, 10 min, 5 tries, 5 sends). A phone capture is a 15-minute link shown as a QR on the borrower's own screen that can only add pages to one document requirement. Sender unit-tested against mocks only. - **************** create, list ("Waiting On Sam"), status (the desktop's live update), cancel, phone-capture. - PATCH **************** merges over the stored borrower: a screen's save changes only what it sent. - Document content ?page=N renders one PDF page; vision readings carry their page and an optional box.