Internal programmatic envelope API (origin=API) for Business

Shipped

June 10, 2026 at 4:13 AM UTC

Author

Kamo

Commit

f82d917

- EsignInternalController (/api/esig/internal/*): X-Internal-Auth + X-Org-Id authed, called by APIService after it validates the API_SIGNATURE-scoped key; reuses EsignEnvelopeService, tags envelopes EsignUsageOrigin.API - **************** gains an origin overload (MANUAL default) - Signing path now meters by the envelope's origin (API -> overage, MANUAL never) - OTKAuthFilter bypasses /api/esig/internal (internal-secret authed, not OTK)