access-link manager shell

Private links

Generate/revoke/expire mechanics wire here later. Migration stores token hashes only; raw tokens are display-on-create only.

active0

access_links.status = active

opened0

use_count > 0

expired / revoked0

no public listing policies

future action

Server action must hash the token before insert and audit-log creation.

link rows

labelstatususesexpirescontact hint
No link rows wired yet.