From 9233d8d95cfb311ef1ca25d5bf22b4d558aaaba8 Mon Sep 17 00:00:00 2001
From: Frost-Phoenix <hugo.pereira@rnl.tecnico.ulisboa.pt>
Date: Sat, 17 Oct 2026 19:59:38 +0100
Subject: [PATCH 01/11] fix(validation): open signed PDF by UUID instead of the
 owner's nodeId

Signed-off-by: oPeras1 <hugo.pereira@rnl.tecnico.ulisboa.pt>
---
 .../validation/DocumentValidationDetails.vue  |  3 +--
 .../validation/EnvelopeValidation.vue         |  7 +++---
 .../DocumentValidationDetails.spec.ts         | 25 +++++++++++++++----
 .../validation/EnvelopeValidation.spec.ts     | 25 +++++++++++++------
 src/utils/viewer.js                           |  5 ++++
 src/views/Validation.vue                      |  3 +--
 6 files changed, 48 insertions(+), 20 deletions(-)

diff --git a/src/components/validation/DocumentValidationDetails.vue b/src/components/validation/DocumentValidationDetails.vue
index c1ed5f6ae6..b0449064a4 100644
--- a/src/components/validation/DocumentValidationDetails.vue
+++ b/src/components/validation/DocumentValidationDetails.vue
@@ -99,14 +99,13 @@ const size = computed(() => {
 const documentStatus = computed(() => getStatusLabel(document.value.status))
 
 async function viewDocument() {
-	if (!document.value.uuid || !document.value.name || typeof document.value.nodeId !== 'number') {
+	if (!document.value.uuid || !document.value.name) {
 		return
 	}
 	const fileUrl = generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: document.value.uuid })
 	await openDocument({
 		fileUrl,
 		filename: document.value.name,
-		nodeId: document.value.nodeId,
 	})
 }
 
diff --git a/src/components/validation/EnvelopeValidation.vue b/src/components/validation/EnvelopeValidation.vue
index 8ab26274cb..94130a29c4 100644
--- a/src/components/validation/EnvelopeValidation.vue
+++ b/src/components/validation/EnvelopeValidation.vue
@@ -65,7 +65,7 @@
 						<template #subname>
 							<strong>{{ t('libresign', 'Status:') }}</strong> {{ getFileStatusText(file) }}
 						</template>
-						<template v-if="!isTouchDevice && file.nodeId" #actions>
+						<template v-if="!isTouchDevice && file.uuid" #actions>
 							<NcActionButton @click.stop="viewFile(file)">
 								<template #icon>
 									<NcIconSvgWrapper :path="mdiEye" :size="20" />
@@ -74,7 +74,7 @@
 							</NcActionButton>
 						</template>
 						<template #extra-actions>
-							<NcButton v-if="isTouchDevice && file.nodeId" variant="tertiary" :aria-label="t('libresign', 'View PDF')" @click.stop="viewFile(file)">
+							<NcButton v-if="isTouchDevice && file.uuid" variant="tertiary" :aria-label="t('libresign', 'View PDF')" @click.stop="viewFile(file)">
 								<template #icon>
 									<NcIconSvgWrapper :path="mdiEye" :size="20" />
 								</template>
@@ -274,14 +274,13 @@ function getSignerProgressText(signer: EnvelopeSigner) {
 }
 
 function viewFile(file: EnvelopeFile) {
-	if (!file.uuid || !file.name || typeof file.nodeId !== 'number') {
+	if (!file.uuid || !file.name) {
 		return
 	}
 	const fileUrl = generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: file.uuid })
 	openDocument({
 		fileUrl,
 		filename: file.name,
-		nodeId: file.nodeId,
 	})
 }
 
diff --git a/src/tests/components/validation/DocumentValidationDetails.spec.ts b/src/tests/components/validation/DocumentValidationDetails.spec.ts
index 89d56e736c..6eb72b82eb 100644
--- a/src/tests/components/validation/DocumentValidationDetails.spec.ts
+++ b/src/tests/components/validation/DocumentValidationDetails.spec.ts
@@ -398,7 +398,7 @@ describe('DocumentValidationDetails', () => {
 			expect(wrapper.vm.document.uuid).toBeUndefined()
 		})
 
-		it('calls openDocument with correct parameters', async () => {
+		it('opens the signed PDF by UUID without passing the owner nodeId', async () => {
 			wrapper = createWrapper({
 				document: {
 					uuid: 'doc-uuid-123',
@@ -410,9 +410,24 @@ describe('DocumentValidationDetails', () => {
 			await wrapper.vm.viewDocument()
 
 			expect(viewer.openDocument).toHaveBeenCalledWith({
-				fileUrl: expect.stringContaining('doc-uuid-123'),
+				fileUrl: '/apps/libresign/p/pdf/doc-uuid-123',
 				filename: 'Test.pdf',
-				nodeId: 456,
+			})
+		})
+
+		it('opens the document when the response has no nodeId', async () => {
+			wrapper = createWrapper({
+				document: {
+					uuid: 'no-node-id',
+					name: 'No nodeId.pdf',
+				},
+			})
+
+			await wrapper.vm.viewDocument()
+
+			expect(viewer.openDocument).toHaveBeenCalledWith({
+				fileUrl: '/apps/libresign/p/pdf/no-node-id',
+				filename: 'No nodeId.pdf',
 			})
 		})
 
@@ -451,8 +466,8 @@ describe('DocumentValidationDetails', () => {
 		it('does not open viewer without required viewer data', async () => {
 			wrapper = createWrapper({
 				document: {
-					uuid: 'missing-node-id',
-					name: 'Missing nodeId.pdf',
+					name: 'Missing uuid.pdf',
+					nodeId: 456,
 				},
 			})
 
diff --git a/src/tests/components/validation/EnvelopeValidation.spec.ts b/src/tests/components/validation/EnvelopeValidation.spec.ts
index c2acb6feef..90df4fa1f7 100644
--- a/src/tests/components/validation/EnvelopeValidation.spec.ts
+++ b/src/tests/components/validation/EnvelopeValidation.spec.ts
@@ -351,13 +351,12 @@ describe('EnvelopeValidation', () => {
 			})
 
 			expect(viewer.openDocument).toHaveBeenCalledWith({
-				fileUrl: expect.stringContaining('file-uuid-123'),
+				fileUrl: '/apps/libresign/p/pdf/file-uuid-123',
 				filename: 'Document.pdf',
-				nodeId: 456,
 			})
 		})
 
-		it('does not open viewer without nodeId', () => {
+		it('opens the file by UUID when it has no nodeId', () => {
 			wrapper = createWrapper()
 
 			wrapper.vm.viewFile({
@@ -365,6 +364,20 @@ describe('EnvelopeValidation', () => {
 				name: 'Document.pdf',
 			})
 
+			expect(viewer.openDocument).toHaveBeenCalledWith({
+				fileUrl: '/apps/libresign/p/pdf/file-uuid-123',
+				filename: 'Document.pdf',
+			})
+		})
+
+		it('does not open viewer without uuid', () => {
+			wrapper = createWrapper()
+
+			wrapper.vm.viewFile({
+				name: 'Document.pdf',
+				nodeId: 456,
+			})
+
 			expect(viewer.openDocument).not.toHaveBeenCalled()
 		})
 	})
@@ -502,8 +515,8 @@ describe('EnvelopeValidation', () => {
 			expect(typeof wrapper.vm.isTouchDevice).toBe('boolean')
 		})
 
-		it('renders actions slot when not touch device and file has nodeId', async () => {
-			const file: EnvelopeFile = { id: 1, nodeId: 123, status: '3', name: 'test.pdf' }
+		it('renders actions slot when not touch device and file has uuid', async () => {
+			const file: EnvelopeFile = { id: 1, uuid: 'test-uuid', nodeId: 123, status: '3', name: 'test.pdf' }
 			wrapper = createWrapper({
 				document: { files: [file] },
 			})
@@ -526,7 +539,6 @@ describe('EnvelopeValidation', () => {
 			expect(viewer.openDocument).toHaveBeenCalledWith({
 				fileUrl: '/apps/libresign/p/pdf/test-uuid',
 				filename: 'test.pdf',
-				nodeId: 123,
 			})
 		})
 
@@ -541,7 +553,6 @@ describe('EnvelopeValidation', () => {
 			expect(viewer.openDocument).toHaveBeenCalledWith({
 				fileUrl: '/apps/libresign/p/pdf/test-uuid',
 				filename: 'test.pdf',
-				nodeId: 123,
 			})
 		})
 	})
diff --git a/src/utils/viewer.js b/src/utils/viewer.js
index 443ba3d627..855eff4268 100644
--- a/src/utils/viewer.js
+++ b/src/utils/viewer.js
@@ -24,6 +24,11 @@ const extractRelativePath = (url) => {
 /**
  * Opens a document using Nextcloud Viewer or in a new window
  *
+ * Without a node ID the Viewer is skipped as well: some Viewer handlers
+ * (e.g. Euro-Office/ONLYOFFICE) ignore `source` and resolve `fileid` in the
+ * current user's filesystem, so they must only receive a node the current
+ * user can access.
+ *
  * @param {object} options - Options for opening the document
  * @param {string} options.fileUrl - The URL of the file to open
  * @param {string} options.filename - The name of the file
diff --git a/src/views/Validation.vue b/src/views/Validation.vue
index 27c821b02f..7ee6459cd6 100644
--- a/src/views/Validation.vue
+++ b/src/views/Validation.vue
@@ -543,14 +543,13 @@ function getIconValidityPath(signer: ValidationDisplaySigner) {
 }
 
 async function viewDocument() {
-	if (!document.value?.uuid || !document.value?.name || typeof document.value.nodeId !== 'number') {
+	if (!document.value?.uuid || !document.value?.name) {
 		return
 	}
 	const fileUrl = generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: document.value.uuid })
 	await openDocument({
 		fileUrl,
 		filename: document.value.name,
-		nodeId: document.value.nodeId,
 	})
 }
 

From e1788faacfb7ab17088b27bb96af94a4f77bcaef Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 18:25:04 +0000
Subject: [PATCH 02/11] build(viewer): add Nextcloud 36 viewer dependency

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 package-lock.json | 464 +++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 454 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index fbe0995042..ec86545218 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1449,6 +1449,19 @@
         "url": "https://github.com/chalk/strip-ansi?sponsor=1"
       }
     },
+    "node_modules/@isaacs/fs-minipass": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz",
+      "integrity": "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==",
+      "license": "ISC",
+      "optional": true,
+      "dependencies": {
+        "minipass": "^7.0.4"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
     "node_modules/@jridgewell/gen-mapping": {
       "version": "0.3.13",
       "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
@@ -1569,6 +1582,30 @@
         "vue": "^3.5.28"
       }
     },
+    "node_modules/@lit-labs/ssr-dom-shim": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@lit-labs/ssr-dom-shim/-/ssr-dom-shim-1.6.0.tgz",
+      "integrity": "sha512-VHb0ALPMTlgKjM6yIxxoQNnpKyUKLD04VzeQdsiXkMqkvYlAHxq9glGLmgbb889/1GsohSOAjvQYoiBppXFqrQ==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/@lit/context": {
+      "version": "1.1.6",
+      "resolved": "https://registry.npmjs.org/@lit/context/-/context-1.1.6.tgz",
+      "integrity": "sha512-M26qDE6UkQbZA2mQ3RjJ3Gzd8TxP+/0obMgE5HfkfLhEEyYE3Bui4A5XHiGPjy0MUGAyxB3QgVuw2ciS0kHn6A==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@lit/reactive-element": "^1.6.2 || ^2.1.0"
+      }
+    },
+    "node_modules/@lit/reactive-element": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/@lit/reactive-element/-/reactive-element-2.1.2.tgz",
+      "integrity": "sha512-pbCDiVMnne1lYUIaYNN5wrwQXDtHaYtg7YEFPeW+hws6U47WeFvISGUWekPGKWOP1ygrs0ef0o1VJMk1exos5A==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@lit-labs/ssr-dom-shim": "^1.5.0"
+      }
+    },
     "node_modules/@marijn/find-cluster-break": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/@marijn/find-cluster-break/-/find-cluster-break-1.0.2.tgz",
@@ -2282,6 +2319,24 @@
         "@nextcloud/files": "^3.12.0"
       }
     },
+    "node_modules/@nextcloud/image-editor": {
+      "version": "1.0.0-beta.7",
+      "resolved": "https://registry.npmjs.org/@nextcloud/image-editor/-/image-editor-1.0.0-beta.7.tgz",
+      "integrity": "sha512-JZG4HCX3XMm2hc54xvEs8xPo60q4g+qvevJu7WWEAqeGTK3erl6q70224OhGC7gDijMZE+kC753WKpJLnYBMwA==",
+      "license": "AGPL-3.0-or-later",
+      "dependencies": {
+        "@nextcloud/l10n": "^3.4.0",
+        "konva": "~10.3.2"
+      },
+      "engines": {
+        "node": "^20.0.0 || ^22.0.0 || ^24.0.0"
+      },
+      "peerDependencies": {
+        "@nextcloud/dialogs": "^7.0.0",
+        "@nextcloud/vue": "^9.0.0",
+        "vue": "^3.5.0"
+      }
+    },
     "node_modules/@nextcloud/initial-state": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/@nextcloud/initial-state/-/initial-state-3.0.0.tgz",
@@ -2550,6 +2605,40 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/@nextcloud/viewer": {
+      "version": "2.0.0-beta.18",
+      "resolved": "https://registry.npmjs.org/@nextcloud/viewer/-/viewer-2.0.0-beta.18.tgz",
+      "integrity": "sha512-keeVIGu1NgfhWwheA2EBvQqwU2ur61lOfg99GYjWNfJIgc+YKQKedh3kF6IK9DCyYRarwp4KD9wzmi6LEKlIpg==",
+      "license": "AGPL-3.0-or-later",
+      "dependencies": {
+        "@mdi/svg": "^7.4.47",
+        "@nextcloud/image-editor": "^1.0.0-beta.6",
+        "@nextcloud/logger": "^3.0.3",
+        "@nextcloud/vue": "^9.13.0",
+        "@videojs/html": "^10.0.1",
+        "debounce": "^3.0.0",
+        "dompurify": "^3.4.14",
+        "opensheetmusicdisplay": "^2.1.3",
+        "vue": "^3.5.0",
+        "vue-material-design-icons": "^5.3.1",
+        "webdav": "^5.10.0"
+      },
+      "engines": {
+        "node": "^24.0.0 || >=26.0.0"
+      },
+      "peerDependencies": {
+        "@nextcloud/axios": "^2.5.2",
+        "@nextcloud/capabilities": "^1.2.1",
+        "@nextcloud/dialogs": "^7.5.0",
+        "@nextcloud/event-bus": "^3.3.3",
+        "@nextcloud/files": "^4.0.0",
+        "@nextcloud/initial-state": "^3.0.0",
+        "@nextcloud/l10n": "^3.4.1",
+        "@nextcloud/paths": "^3.1.0",
+        "@nextcloud/router": "^3.1.0",
+        "@nextcloud/sharing": "^0.4.0 || ^1.0.0-beta.2"
+      }
+    },
     "node_modules/@nextcloud/vite-config": {
       "version": "2.5.4",
       "resolved": "https://registry.npmjs.org/@nextcloud/vite-config/-/vite-config-2.5.4.tgz",
@@ -4061,6 +4150,12 @@
       "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
       "license": "MIT"
     },
+    "node_modules/@types/vexflow": {
+      "version": "1.2.42",
+      "resolved": "https://registry.npmjs.org/@types/vexflow/-/vexflow-1.2.42.tgz",
+      "integrity": "sha512-bj3If1sm1FYJN0tJMV2BJNrwoeQ6xfrTt+rbmFvUytyxUhklLlW79MR4uwQ+upzrNJLVy012TnC7oZqSpEglSw==",
+      "license": "MIT"
+    },
     "node_modules/@types/web-bluetooth": {
       "version": "0.0.21",
       "resolved": "https://registry.npmjs.org/@types/web-bluetooth/-/web-bluetooth-0.0.21.tgz",
@@ -5901,7 +5996,7 @@
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
       "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
-      "dev": true,
+      "devOptional": true,
       "funding": [
         {
           "type": "github",
@@ -5931,6 +6026,16 @@
         "node": ">=6.0.0"
       }
     },
+    "node_modules/bindings": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz",
+      "integrity": "sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "file-uri-to-path": "1.0.0"
+      }
+    },
     "node_modules/birpc": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/birpc/-/birpc-2.9.0.tgz",
@@ -5940,6 +6045,40 @@
         "url": "https://github.com/sponsors/antfu"
       }
     },
+    "node_modules/bit-twiddle": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/bit-twiddle/-/bit-twiddle-1.0.2.tgz",
+      "integrity": "sha512-B9UhK0DKFZhoTFcfvAzhqsjStvGJp9vYWf3+6SNTtdSQnvIgfkHbgHrg/e4+TH71N2GDu8tpmCVoyfrL1d7ntA==",
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/bl": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
+      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "buffer": "^5.5.0",
+        "inherits": "^2.0.4",
+        "readable-stream": "^3.4.0"
+      }
+    },
+    "node_modules/bl/node_modules/readable-stream": {
+      "version": "3.6.2",
+      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
+      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "inherits": "^2.0.3",
+        "string_decoder": "^1.1.1",
+        "util-deprecate": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
     "node_modules/blueimp-md5": {
       "version": "2.19.0",
       "resolved": "https://registry.npmjs.org/blueimp-md5/-/blueimp-md5-2.19.0.tgz",
@@ -6143,7 +6282,7 @@
       "version": "5.7.1",
       "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
       "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-      "dev": true,
+      "devOptional": true,
       "funding": [
         {
           "type": "github",
@@ -6443,6 +6582,16 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
+    "node_modules/chownr": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
+      "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==",
+      "license": "BlueOak-1.0.0",
+      "optional": true,
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/cipher-base": {
       "version": "1.0.7",
       "resolved": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.7.tgz",
@@ -6995,6 +7144,22 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
+    "node_modules/decompress-response": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz",
+      "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "mimic-response": "^3.1.0"
+      },
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/deep-equal": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/deep-equal/-/deep-equal-2.2.3.tgz",
@@ -7035,6 +7200,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/deep-extend": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz",
+      "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==",
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=4.0.0"
+      }
+    },
     "node_modules/deep-is": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
@@ -7398,6 +7573,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/end-of-stream": {
+      "version": "1.4.5",
+      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
+      "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "once": "^1.4.0"
+      }
+    },
     "node_modules/entities": {
       "version": "7.0.1",
       "resolved": "https://registry.npmjs.org/entities/-/entities-7.0.1.tgz",
@@ -7414,9 +7599,8 @@
       "version": "2.2.1",
       "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz",
       "integrity": "sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
-      "peer": true,
       "engines": {
         "node": ">=6"
       }
@@ -8475,6 +8659,16 @@
         "safe-buffer": "^5.1.1"
       }
     },
+    "node_modules/expand-template": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz",
+      "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==",
+      "license": "(MIT OR WTFPL)",
+      "optional": true,
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/expect-type": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
@@ -8485,6 +8679,13 @@
         "node": ">=12.0.0"
       }
     },
+    "node_modules/exponential-backoff": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/exponential-backoff/-/exponential-backoff-3.1.3.tgz",
+      "integrity": "sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==",
+      "license": "Apache-2.0",
+      "optional": true
+    },
     "node_modules/exsolve": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/exsolve/-/exsolve-1.0.8.tgz",
@@ -8681,6 +8882,13 @@
         "node": "^10.12.0 || >=12.0.0"
       }
     },
+    "node_modules/file-uri-to-path": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz",
+      "integrity": "sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==",
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/fill-range": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
@@ -9181,6 +9389,16 @@
       "license": "MIT",
       "peer": true
     },
+    "node_modules/glsl-tokenizer": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/glsl-tokenizer/-/glsl-tokenizer-2.1.5.tgz",
+      "integrity": "sha512-XSZEJ/i4dmz3Pmbnpsy3cKh7cotvFlBiZnDOwnj/05EwNp2XrhQ4XKJxT7/pDt4kp4YcpRSKz8eTV7S+mwV6MA==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "through2": "^0.6.3"
+      }
+    },
     "node_modules/gopd": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
@@ -9554,7 +9772,7 @@
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
       "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==",
-      "dev": true,
+      "devOptional": true,
       "funding": [
         {
           "type": "github",
@@ -9582,6 +9800,12 @@
         "node": ">= 4"
       }
     },
+    "node_modules/immediate": {
+      "version": "3.0.6",
+      "resolved": "https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz",
+      "integrity": "sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==",
+      "license": "MIT"
+    },
     "node_modules/immutable": {
       "version": "5.1.9",
       "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.9.tgz",
@@ -9677,7 +9901,7 @@
       "version": "1.3.8",
       "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",
       "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==",
-      "dev": true,
+      "devOptional": true,
       "license": "ISC"
     },
     "node_modules/inline-style-parser": {
@@ -10712,6 +10936,19 @@
       "license": "MIT",
       "peer": true
     },
+    "node_modules/loglevel": {
+      "version": "1.9.2",
+      "resolved": "https://registry.npmjs.org/loglevel/-/loglevel-1.9.2.tgz",
+      "integrity": "sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6.0"
+      },
+      "funding": {
+        "type": "tidelift",
+        "url": "https://tidelift.com/funding/github/npm/loglevel"
+      }
+    },
     "node_modules/longest-streak": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz",
@@ -11634,6 +11871,19 @@
         "node": ">= 0.6"
       }
     },
+    "node_modules/mimic-response": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz",
+      "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==",
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/minimalistic-assert": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz",
@@ -11676,7 +11926,7 @@
       "version": "7.1.3",
       "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz",
       "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==",
-      "dev": true,
+      "devOptional": true,
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": ">=16 || 14 >=14.17"
@@ -11738,6 +11988,13 @@
       "integrity": "sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==",
       "license": "MIT"
     },
+    "node_modules/nan": {
+      "version": "2.30.0",
+      "resolved": "https://registry.npmjs.org/nan/-/nan-2.30.0.tgz",
+      "integrity": "sha512-P5mokDkSvCGBz6mZDD/2l+w9QoICRXdCyZ9ONGmTePr40oihJg3Kpn0YU3twKd6PJnwSlLBWNQeOT6yWEV2c4A==",
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/nanoid": {
       "version": "3.3.18",
       "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
@@ -11787,6 +12044,19 @@
       "integrity": "sha512-yFehXNWRs4cM0+dz7QxCd06hTbWbSkV0ISsqBfkntU6TOY4Qm3Q88fRRLOddkGh2Qq6dZvnKVAahfhjcUvLnyA==",
       "license": "MIT"
     },
+    "node_modules/node-abi": {
+      "version": "3.99.0",
+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.99.0.tgz",
+      "integrity": "sha512-lLdwkeg2XUVPTHqWjPltTxH81zbQNbUWC+AEb9ni50KjxkUzAAx1HGtMT21sbntzfUGfIphhcklvs3imJeqDXw==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "semver": "^7.3.5"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/node-addon-api": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-7.1.1.tgz",
@@ -12134,6 +12404,16 @@
         "wrappy": "1"
       }
     },
+    "node_modules/once": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
+      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
+      "license": "ISC",
+      "optional": true,
+      "dependencies": {
+        "wrappy": "1"
+      }
+    },
     "node_modules/openapi-typescript": {
       "version": "7.13.0",
       "resolved": "https://registry.npmjs.org/openapi-typescript/-/openapi-typescript-7.13.0.tgz",
@@ -12168,6 +12448,22 @@
         "url": "https://github.com/chalk/supports-color?sponsor=1"
       }
     },
+    "node_modules/opensheetmusicdisplay": {
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/opensheetmusicdisplay/-/opensheetmusicdisplay-2.2.1.tgz",
+      "integrity": "sha512-2DqI2lQKKzDDoIe7yD8yNyWTofSdRbFZYTD3nGRzEo1XmTK2DJWcUXLRXZ2E5xzOt7Pd+RmSGL1quFQZRCqDMw==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@types/vexflow": "^1.2.38",
+        "jszip": "3.10.1",
+        "loglevel": "^1.8.0",
+        "typescript-collections": "^1.3.3",
+        "vexflow": "1.2.93"
+      },
+      "optionalDependencies": {
+        "gl": "^9.0.0-rc.10"
+      }
+    },
     "node_modules/optionator": {
       "version": "0.9.4",
       "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
@@ -12306,7 +12602,6 @@
       "version": "1.0.11",
       "resolved": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz",
       "integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==",
-      "dev": true,
       "license": "(MIT AND Zlib)"
     },
     "node_modules/parent-module": {
@@ -12790,6 +13085,34 @@
       "license": "MIT",
       "peer": true
     },
+    "node_modules/prebuild-install": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.3.tgz",
+      "integrity": "sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==",
+      "deprecated": "No longer maintained. Please contact the author of the relevant native addon; alternatives are available.",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "detect-libc": "^2.0.0",
+        "expand-template": "^2.0.3",
+        "github-from-package": "0.0.0",
+        "minimist": "^1.2.3",
+        "mkdirp-classic": "^0.5.3",
+        "napi-build-utils": "^2.0.0",
+        "node-abi": "^3.3.0",
+        "pump": "^3.0.0",
+        "rc": "^1.2.7",
+        "simple-get": "^4.0.0",
+        "tar-fs": "^2.0.0",
+        "tunnel-agent": "^0.6.0"
+      },
+      "bin": {
+        "prebuild-install": "bin.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/prelude-ls": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz",
@@ -12829,6 +13152,16 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
+    "node_modules/proc-log": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz",
+      "integrity": "sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==",
+      "license": "ISC",
+      "optional": true,
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
     "node_modules/process": {
       "version": "0.11.10",
       "resolved": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
@@ -12891,6 +13224,17 @@
       "integrity": "sha512-fGTi3gxV/23FTYdAoUtLYp6qySe2KE3teyZitipKNRuVYcBkoP/bB3guXN/XVKUe9mxCHXnc9C4ocyz8OmgN0g==",
       "license": "MIT"
     },
+    "node_modules/pump": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz",
+      "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==",
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "end-of-stream": "^1.1.0",
+        "once": "^1.3.1"
+      }
+    },
     "node_modules/punycode": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
@@ -13013,6 +13357,41 @@
         "safe-buffer": "^5.1.0"
       }
     },
+    "node_modules/rc": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz",
+      "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==",
+      "license": "(BSD-2-Clause OR MIT OR Apache-2.0)",
+      "optional": true,
+      "dependencies": {
+        "deep-extend": "^0.6.0",
+        "ini": "~1.3.0",
+        "minimist": "^1.2.0",
+        "strip-json-comments": "~2.0.1"
+      },
+      "bin": {
+        "rc": "cli.js"
+      }
+    },
+    "node_modules/react": {
+      "version": "19.3.1",
+      "resolved": "https://registry.npmjs.org/react/-/react-19.3.1.tgz",
+      "integrity": "sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw==",
+      "license": "MIT",
+      "peer": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/react-compiler-runtime": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/react-compiler-runtime/-/react-compiler-runtime-1.0.0.tgz",
+      "integrity": "sha512-rRfjYv66HlG8896yPUDONgKzG5BxZD1nV9U6rkm+7VCuvQc903C4MjcoZR4zPw53IKSOX9wMQVpA1IAbRtzQ7w==",
+      "license": "MIT",
+      "peerDependencies": {
+        "react": "^17.0.0 || ^18.0.0 || ^19.0.0 || ^0.0.0-experimental"
+      }
+    },
     "node_modules/react-is": {
       "version": "17.0.2",
       "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz",
@@ -14243,7 +14622,6 @@
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz",
       "integrity": "sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/sha.js": {
@@ -14385,12 +14763,65 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/signal-polyfill": {
+      "version": "0.2.2",
+      "resolved": "https://registry.npmjs.org/signal-polyfill/-/signal-polyfill-0.2.2.tgz",
+      "integrity": "sha512-p63Y4Er5/eMQ9RHg0M0Y64NlsQKpiu6MDdhBXpyywRuWiPywhJTpKJ1iB5K2hJEbFZ0BnDS7ZkJ+0AfTuL37Rg==",
+      "license": "Apache-2.0"
+    },
     "node_modules/signature_pad": {
       "version": "5.1.3",
       "resolved": "https://registry.npmjs.org/signature_pad/-/signature_pad-5.1.3.tgz",
       "integrity": "sha512-zyxW5vuJVnQdGcU+kAj9FYl7WaAunY3kA5S7mPg0xJiujL9+sPAWfSQHS5tXaJXDUa4FuZeKhfdCDQ6K3wfkpQ==",
       "license": "MIT"
     },
+    "node_modules/simple-concat": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz",
+      "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/simple-get": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz",
+      "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "decompress-response": "^6.0.0",
+        "once": "^1.3.1",
+        "simple-concat": "^1.0.0"
+      }
+    },
     "node_modules/slash": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz",
@@ -15761,6 +16192,19 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/tunnel-agent": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
+      "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==",
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
+      },
+      "engines": {
+        "node": "*"
+      }
+    },
     "node_modules/type-check": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz",
@@ -17334,7 +17778,7 @@
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
       "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==",
-      "dev": true,
+      "devOptional": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.4"

From 27e07b09eca6a09ccd3421c3b49ef87303804a62 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 18:25:31 +0000
Subject: [PATCH 03/11] fix(viewer): open LibreSign signed PDFs with the NC36
 Viewer

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 src/tests/utils/viewer.spec.ts | 32 ++++++++---------------
 src/utils/viewer.js            | 46 ++++++++++++++++++++--------------
 2 files changed, 38 insertions(+), 40 deletions(-)

diff --git a/src/tests/utils/viewer.spec.ts b/src/tests/utils/viewer.spec.ts
index 420fc35fd3..0cb10c8317 100644
--- a/src/tests/utils/viewer.spec.ts
+++ b/src/tests/utils/viewer.spec.ts
@@ -6,18 +6,9 @@
 import { describe, expect, it, vi, beforeEach, afterEach } from 'vitest'
 import { openDocument } from '../../utils/viewer.js'
 
-type GlobalWithOCA = typeof globalThis & {
-	OCA?: {
-		Viewer?: {
-			open?: (params: unknown) => void
-		}
-		[key: string]: unknown
-	}
-}
-
-describe('openDocument', () => {
-	let originalOCA: GlobalWithOCA['OCA']
-	let openSpy: ReturnType<typeof vi.spyOn>
+describe('openDocument on Nextcloud 36', () => {
+	let viewerOpen: ReturnType<typeof vi.fn>
+	let windowOpen: ReturnType<typeof vi.spyOn>
 
 	beforeEach(() => {
 		originalOCA = (global as GlobalWithOCA).OCA
@@ -25,8 +16,7 @@ describe('openDocument', () => {
 	})
 
 	afterEach(() => {
-		openSpy.mockRestore()
-		;(global as GlobalWithOCA).OCA = originalOCA
+		windowOpen.mockRestore()
 	})
 
 	it('uses Nextcloud Viewer when available', () => {
@@ -37,11 +27,7 @@ describe('openDocument', () => {
 			},
 		}
 
-		const file = {
-			filename: 'doc.pdf',
-			nodeId: 123,
-			url: 'https://example.test/index.php/apps/files/?file=/doc.pdf',
-		}
+		await openDocument({ fileUrl: url, filename: 'signed.pdf', nodeId: 42 })
 
 		openDocument({
 			fileUrl: file.url,
@@ -59,8 +45,12 @@ describe('openDocument', () => {
 		}
 	})
 
-	it('opens new window when Viewer is not available', () => {
-		;(global as GlobalWithOCA).OCA = undefined
+	it('selects PDF.js even when an Office handler has higher priority', async () => {
+		const officeEnabled = vi.fn(() => true)
+		mocks.getHandlers.mockReturnValue(new Map([
+			['eurooffice', { id: 'eurooffice', enabled: officeEnabled }],
+			['pdf', { id: 'pdf', enabled: () => true }],
+		]))
 
 		const file = {
 			filename: 'doc.pdf',
diff --git a/src/utils/viewer.js b/src/utils/viewer.js
index 855eff4268..a77c4d8d39 100644
--- a/src/utils/viewer.js
+++ b/src/utils/viewer.js
@@ -4,21 +4,31 @@
  */
 
 /**
- * Extracts the relative path from a URL.
- * Handles absolute URLs (e.g., from localhost in dev/proxy environments)
- * and returns only the pathname + search + hash.
+ * Construct a read-only file for a URL supplied by LibreSign. In particular,
+ * the file ID of an unsigned original must not be attached to a signed PDF
+ * served by LibreSign's UUID endpoint.
  *
- * @param {string} url The URL to extract the path from
- * @return {string} The relative path
+ * @param {URL} url The absolute document URL
+ * @param {string} filename Display name
+ * @param {string} mime MIME type
+ * @param {number | undefined} nodeId The user's accessible DAV node ID, if any
+ * @return {File} A viewable file
  */
-const extractRelativePath = (url) => {
-	try {
-		const urlObj = new URL(url, window.location.origin)
-		return urlObj.pathname + urlObj.search + urlObj.hash
-	} catch (e) {
-		// If url is already a relative path, return as-is
-		return url
-	}
+const createViewerFile = (url, filename, mime, nodeId) => {
+	const currentUser = getCurrentUser()
+	const davUser = decodeURIComponent(url.pathname).match(/\/remote\.php\/dav\/files\/([^/]+)(?:\/|$)/)?.[1]
+	const isOwnDavFile = davUser !== undefined && davUser === currentUser?.uid
+	const hasAccessibleId = isOwnDavFile && Number.isSafeInteger(nodeId) && nodeId > 0
+
+	return new File({
+		source: url.href,
+		root: isOwnDavFile ? `/files/${davUser}` : '/',
+		owner: isOwnDavFile ? davUser : null,
+		displayname: filename,
+		mime,
+		permissions: Permission.READ,
+		...(hasAccessibleId ? { id: String(nodeId) } : {}),
+	})
 }
 
 /**
@@ -45,11 +55,9 @@ export const openDocument = ({ fileUrl, filename, nodeId, mime = 'application/pd
 			mime,
 			fileid: nodeId,
 		}
-		OCA.Viewer.open({
-			fileInfo,
-			list: [fileInfo],
-		})
-	} else {
-		window.open(`${source}?_t=${Date.now()}`)
 	}
+
+	// No compatible Viewer handler (or an error opening it): use the URL.
+	url.searchParams.set('_t', String(Date.now()))
+	window.open(url.href)
 }

From 0bcdffeba2ce995f58a99d74667bc3a09fb12fb7 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 18:36:38 +0000
Subject: [PATCH 04/11] fix(viewer): surface NC36 viewer failures without
 silent fallback

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 src/components/RightSidebar/EnvelopeFilesList.vue   | 2 +-
 src/components/RightSidebar/RequestSignatureTab.vue | 2 +-
 src/components/validation/EnvelopeValidation.vue    | 2 +-
 src/utils/viewer.js                                 | 2 +-
 src/views/Documents/IdDocsValidation.vue            | 2 +-
 src/views/FilesList/FileEntry/FileEntryActions.vue  | 4 ++--
 src/views/Settings/CertificatePolicy.vue            | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/src/components/RightSidebar/EnvelopeFilesList.vue b/src/components/RightSidebar/EnvelopeFilesList.vue
index dac9a3f02f..8cec01c337 100644
--- a/src/components/RightSidebar/EnvelopeFilesList.vue
+++ b/src/components/RightSidebar/EnvelopeFilesList.vue
@@ -432,7 +432,7 @@ function getPreviewUrl(file: Partial<EnvelopeFile> & { id?: number; nodeId?: num
 
 function openFile(file: EnvelopeFile) {
 	const fileUrl = generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: file.uuid })
-	openDocument({
+	return openDocument({
 		fileUrl,
 		filename: file.name || '',
 		nodeId: file.id,
diff --git a/src/components/RightSidebar/RequestSignatureTab.vue b/src/components/RightSidebar/RequestSignatureTab.vue
index 4b0074754f..23b173ff8a 100644
--- a/src/components/RightSidebar/RequestSignatureTab.vue
+++ b/src/components/RightSidebar/RequestSignatureTab.vue
@@ -1150,7 +1150,7 @@ function openFile() {
 		return
 	}
 
-	openDocument({
+	return openDocument({
 		fileUrl,
 		filename: file.name,
 		nodeId: file.nodeId,
diff --git a/src/components/validation/EnvelopeValidation.vue b/src/components/validation/EnvelopeValidation.vue
index 94130a29c4..7f75fd2b81 100644
--- a/src/components/validation/EnvelopeValidation.vue
+++ b/src/components/validation/EnvelopeValidation.vue
@@ -278,7 +278,7 @@ function viewFile(file: EnvelopeFile) {
 		return
 	}
 	const fileUrl = generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: file.uuid })
-	openDocument({
+	return openDocument({
 		fileUrl,
 		filename: file.name,
 	})
diff --git a/src/utils/viewer.js b/src/utils/viewer.js
index a77c4d8d39..05ac3b534c 100644
--- a/src/utils/viewer.js
+++ b/src/utils/viewer.js
@@ -57,7 +57,7 @@ export const openDocument = ({ fileUrl, filename, nodeId, mime = 'application/pd
 		}
 	}
 
-	// No compatible Viewer handler (or an error opening it): use the URL.
+	// Fallback is for unavailable handlers only. Viewer failures must surface.
 	url.searchParams.set('_t', String(Date.now()))
 	window.open(url.href)
 }
diff --git a/src/views/Documents/IdDocsValidation.vue b/src/views/Documents/IdDocsValidation.vue
index a3729232c7..380dc5028f 100644
--- a/src/views/Documents/IdDocsValidation.vue
+++ b/src/views/Documents/IdDocsValidation.vue
@@ -421,7 +421,7 @@ function openFile(doc: IdDocEntry) {
 		return
 	}
 
-	openDocument({
+	return openDocument({
 		fileUrl,
 		filename: doc.file.name,
 		nodeId: doc.file.file.nodeId,
diff --git a/src/views/FilesList/FileEntry/FileEntryActions.vue b/src/views/FilesList/FileEntry/FileEntryActions.vue
index 35e5cf3964..342ec82d4d 100644
--- a/src/views/FilesList/FileEntry/FileEntryActions.vue
+++ b/src/views/FilesList/FileEntry/FileEntryActions.vue
@@ -214,7 +214,7 @@ async function onActionClick(action: Pick<MenuAction, 'id'>) {
 	} else if (action.id === 'rename') {
 		emit('start-rename')
 	} else if (action.id === 'open') {
-		openFile()
+		await openFile()
 	}
 }
 
@@ -228,7 +228,7 @@ function openFile() {
 	const fileUrl = props.source.file
 		|| generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: props.source.uuid })
 
-	openDocument({
+	return openDocument({
 		fileUrl,
 		filename: props.source.name,
 		nodeId: props.source.nodeId ?? 0,
diff --git a/src/views/Settings/CertificatePolicy.vue b/src/views/Settings/CertificatePolicy.vue
index 30555f13fd..b5c6f5f8f4 100644
--- a/src/views/Settings/CertificatePolicy.vue
+++ b/src/views/Settings/CertificatePolicy.vue
@@ -126,7 +126,7 @@ function emitValidity() {
 }
 
 function view() {
-	openDocument({
+	return openDocument({
 		fileUrl: CPS.value,
 		filename: 'Certificate Policy',
 		nodeId: 0,

From a663bbe5fe4bcc6e59d9c43fbf434c9667e20f2b Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 18:37:06 +0000
Subject: [PATCH 05/11] test(validation): assert signed PDF opens in native
 Viewer

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 ...-unauthenticated-visible-signature.spec.ts | 37 +++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
index 65b98d19eb..96e3a032af 100644
--- a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
+++ b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
@@ -237,4 +237,41 @@ test('unauthenticated signer can define a visible signature for an envelope with
 	await test.step('Then the success confirmation screen is shown with the envelope name', async () => {
 		await expectEnvelopeSigned(page, scenario.envelopeName)
 	})
+
+	await test.step('The signed PDF opens in the native Viewer, not Euro-Office', async () => {
+		const currentTabs = page.context().pages().length
+		const officeRequests: string[] = []
+		page.on('request', request => {
+			if (request.url().includes('/apps/eurooffice/')) {
+				officeRequests.push(request.url())
+			}
+		})
+
+		const pdfResponse = page.waitForResponse(response =>
+			response.request().method() === 'GET'
+			&& response.url().includes('/apps/libresign/p/pdf/'),
+		)
+		await page.getByRole('button', { name: 'Show details' }).first().click()
+		await page.getByRole('button', { name: 'View document' }).first().click()
+		await expect(page.locator('[role="dialog"][data-handler="pdf"]')).toBeVisible({ timeout: 15_000 })
+
+		const response = await pdfResponse
+		expect(response.status()).toBe(200)
+		expect(response.headers()['content-type']).toContain('application/pdf')
+		await expect.poll(async () => {
+			const pdfFrame = page.frames().find(frame => frame.url().includes('/apps/files_pdfviewer/'))
+			return pdfFrame?.evaluate(() => {
+				const pdf = (window as typeof window & {
+					PDFViewerApplication?: { pdfDocument?: { numPages?: number } }
+				}).PDFViewerApplication
+				return pdf?.pdfDocument?.numPages ?? 0
+			}) ?? 0
+		}, { timeout: 15_000 }).toBeGreaterThan(0)
+
+		const signedPdf = await page.request.get(response.url())
+		expect(signedPdf.status()).toBe(200)
+		expect((await signedPdf.body()).toString('latin1')).toContain('/ByteRange')
+		expect(officeRequests).toHaveLength(0)
+		expect(page.context().pages()).toHaveLength(currentTabs)
+	})
 })

From 4592c0e9db2547b46fcba499177c33c7ef97ed40 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 21:42:19 +0000
Subject: [PATCH 06/11] test: provide Nextcloud preview capabilities for Viewer
 imports

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 src/tests/testHelpers/nextcloudMocks.js | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/tests/testHelpers/nextcloudMocks.js b/src/tests/testHelpers/nextcloudMocks.js
index 029334c888..924522f22d 100644
--- a/src/tests/testHelpers/nextcloudMocks.js
+++ b/src/tests/testHelpers/nextcloudMocks.js
@@ -57,3 +57,13 @@ global.OCP = global.OCP ?? {
 }
 
 global.window._oc_webroot = '/'
+
+// The Viewer reads Nextcloud's preview MIME capabilities during module imports.
+// Provide a preview-enabled test server instead of intercepting its warnings.
+global.window._oc_capabilities = {
+	core: {
+		previews: {
+			enabled_providers: ['^image/'],
+		},
+	},
+}

From c546cf3298af635ef92012425e63b736939a7de0 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 21:42:35 +0000
Subject: [PATCH 07/11] test: cover signed PDF fallback in source-checkout E2E

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 ...-unauthenticated-visible-signature.spec.ts | 42 ++++++++++++-------
 1 file changed, 27 insertions(+), 15 deletions(-)

diff --git a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
index 96e3a032af..c814eab768 100644
--- a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
+++ b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
@@ -238,40 +238,52 @@ test('unauthenticated signer can define a visible signature for an envelope with
 		await expectEnvelopeSigned(page, scenario.envelopeName)
 	})
 
-	await test.step('The signed PDF opens in the native Viewer, not Euro-Office', async () => {
-		const currentTabs = page.context().pages().length
+	await test.step('The signed PDF opens by UUID without using an Office handler', async () => {
+		const context = page.context()
+		const existingPages = new Set(context.pages())
 		const officeRequests: string[] = []
-		page.on('request', request => {
+		context.on('request', request => {
 			if (request.url().includes('/apps/eurooffice/')) {
 				officeRequests.push(request.url())
 			}
 		})
 
-		const pdfResponse = page.waitForResponse(response =>
+		// CI checks out Nextcloud's source without installing files_pdfviewer.
+		// The Viewer opens PDFs when its handler is registered; otherwise the
+		// supported fallback opens the same signed UUID URL in another tab.
+		const pdfResponse = context.waitForEvent('response', response =>
 			response.request().method() === 'GET'
 			&& response.url().includes('/apps/libresign/p/pdf/'),
 		)
 		await page.getByRole('button', { name: 'Show details' }).first().click()
 		await page.getByRole('button', { name: 'View document' }).first().click()
-		await expect(page.locator('[role="dialog"][data-handler="pdf"]')).toBeVisible({ timeout: 15_000 })
 
 		const response = await pdfResponse
 		expect(response.status()).toBe(200)
 		expect(response.headers()['content-type']).toContain('application/pdf')
-		await expect.poll(async () => {
-			const pdfFrame = page.frames().find(frame => frame.url().includes('/apps/files_pdfviewer/'))
-			return pdfFrame?.evaluate(() => {
-				const pdf = (window as typeof window & {
-					PDFViewerApplication?: { pdfDocument?: { numPages?: number } }
-				}).PDFViewerApplication
-				return pdf?.pdfDocument?.numPages ?? 0
-			}) ?? 0
-		}, { timeout: 15_000 }).toBeGreaterThan(0)
+		expect(new URL(response.url()).pathname).toMatch(/\/apps\/libresign\/p\/pdf\/[^/]+$/)
+
+		const newPages = context.pages().filter(openedPage => !existingPages.has(openedPage))
+		expect(newPages.length).toBeLessThanOrEqual(1)
+		if (newPages.length === 0) {
+			await expect(page.locator('[role="dialog"][data-handler="pdf"]')).toBeVisible({ timeout: 15_000 })
+			await expect.poll(async () => {
+				const pdfFrame = page.frames().find(frame => frame.url().includes('/apps/files_pdfviewer/'))
+				return pdfFrame?.evaluate(() => {
+					const pdf = (window as typeof window & {
+						PDFViewerApplication?: { pdfDocument?: { numPages?: number } }
+					}).PDFViewerApplication
+					return pdf?.pdfDocument?.numPages ?? 0
+				}) ?? 0
+			}, { timeout: 15_000 }).toBeGreaterThan(0)
+		} else {
+			await expect(newPages[0]).toHaveURL(/\/apps\/libresign\/p\/pdf\/[^/]+/)
+		}
 
 		const signedPdf = await page.request.get(response.url())
 		expect(signedPdf.status()).toBe(200)
 		expect((await signedPdf.body()).toString('latin1')).toContain('/ByteRange')
 		expect(officeRequests).toHaveLength(0)
-		expect(page.context().pages()).toHaveLength(currentTabs)
+		expect(context.pages()).toHaveLength(existingPages.size + newPages.length)
 	})
 })

From 840a5515a6b3109e292efddecc659f75e7c46f11 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 22:22:11 +0000
Subject: [PATCH 08/11] test: ensure public validation policy for anonymous PDF
 E2E

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>

From 02c1c770ef7ed551200d988ecc0b531a6cb3b08d Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Tue, 20 Oct 2026 23:15:27 +0000
Subject: [PATCH 09/11] test(validation): wait for signed PDF popup before
 asserting fallback

test(validation): wait for signed PDF popup before asserting fallback

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>

[skip ci]
---
 ...-unauthenticated-visible-signature.spec.ts | 22 +++++++++++++------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
index c814eab768..407cf13e79 100644
--- a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
+++ b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
@@ -240,7 +240,8 @@ test('unauthenticated signer can define a visible signature for an envelope with
 
 	await test.step('The signed PDF opens by UUID without using an Office handler', async () => {
 		const context = page.context()
-		const existingPages = new Set(context.pages())
+		const openedPopups: Page[] = []
+		page.on('popup', popup => { openedPopups.push(popup) })
 		const officeRequests: string[] = []
 		context.on('request', request => {
 			if (request.url().includes('/apps/eurooffice/')) {
@@ -263,10 +264,16 @@ test('unauthenticated signer can define a visible signature for an envelope with
 		expect(response.headers()['content-type']).toContain('application/pdf')
 		expect(new URL(response.url()).pathname).toMatch(/\/apps\/libresign\/p\/pdf\/[^/]+$/)
 
-		const newPages = context.pages().filter(openedPage => !existingPages.has(openedPage))
-		expect(newPages.length).toBeLessThanOrEqual(1)
-		if (newPages.length === 0) {
-			await expect(page.locator('[role="dialog"][data-handler="pdf"]')).toBeVisible({ timeout: 15_000 })
+		// In Chromium the PDF response can arrive before the popup is reported.
+		// Wait for the actual presentation, not an immediate context.pages() snapshot.
+		const nativeViewer = page.locator('[role="dialog"][data-handler="pdf"]')
+		await expect.poll(async () =>
+			await nativeViewer.isVisible() || openedPopups.length > 0,
+		{ timeout: 15_000 }).toBe(true)
+
+		if (await nativeViewer.isVisible()) {
+			expect(openedPopups).toHaveLength(0)
+			await expect(nativeViewer).toBeVisible()
 			await expect.poll(async () => {
 				const pdfFrame = page.frames().find(frame => frame.url().includes('/apps/files_pdfviewer/'))
 				return pdfFrame?.evaluate(() => {
@@ -277,13 +284,14 @@ test('unauthenticated signer can define a visible signature for an envelope with
 				}) ?? 0
 			}, { timeout: 15_000 }).toBeGreaterThan(0)
 		} else {
-			await expect(newPages[0]).toHaveURL(/\/apps\/libresign\/p\/pdf\/[^/]+/)
+			// Chromium headless can download inline PDFs rather than navigating
+			// the popup, so validate the response URL and signed bytes below.
+			expect(openedPopups).toHaveLength(1)
 		}
 
 		const signedPdf = await page.request.get(response.url())
 		expect(signedPdf.status()).toBe(200)
 		expect((await signedPdf.body()).toString('latin1')).toContain('/ByteRange')
 		expect(officeRequests).toHaveLength(0)
-		expect(context.pages()).toHaveLength(existingPages.size + newPages.length)
 	})
 })

From 0b22519bfdda0cb9fb9d2202bf0b0894ecfd22f1 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Wed, 21 Oct 2026 00:11:06 +0000
Subject: [PATCH 10/11] fix(viewer): adapt stable33 backport to the legacy PDF
 handler

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 package-lock.json                             | 464 +-----------------
 .../RightSidebar/EnvelopeFilesList.vue        |   2 +-
 .../RightSidebar/RequestSignatureTab.vue      |   2 +-
 src/tests/testHelpers/nextcloudMocks.js       |  10 -
 src/tests/utils/viewer.spec.ts                | 132 +++--
 src/utils/viewer.js                           |  76 ++-
 src/views/Documents/IdDocsValidation.vue      |   2 +-
 .../FilesList/FileEntry/FileEntryActions.vue  |   4 +-
 src/views/Settings/CertificatePolicy.vue      |   2 +-
 9 files changed, 131 insertions(+), 563 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index ec86545218..fbe0995042 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1449,19 +1449,6 @@
         "url": "https://github.com/chalk/strip-ansi?sponsor=1"
       }
     },
-    "node_modules/@isaacs/fs-minipass": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz",
-      "integrity": "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==",
-      "license": "ISC",
-      "optional": true,
-      "dependencies": {
-        "minipass": "^7.0.4"
-      },
-      "engines": {
-        "node": ">=18.0.0"
-      }
-    },
     "node_modules/@jridgewell/gen-mapping": {
       "version": "0.3.13",
       "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
@@ -1582,30 +1569,6 @@
         "vue": "^3.5.28"
       }
     },
-    "node_modules/@lit-labs/ssr-dom-shim": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/@lit-labs/ssr-dom-shim/-/ssr-dom-shim-1.6.0.tgz",
-      "integrity": "sha512-VHb0ALPMTlgKjM6yIxxoQNnpKyUKLD04VzeQdsiXkMqkvYlAHxq9glGLmgbb889/1GsohSOAjvQYoiBppXFqrQ==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/@lit/context": {
-      "version": "1.1.6",
-      "resolved": "https://registry.npmjs.org/@lit/context/-/context-1.1.6.tgz",
-      "integrity": "sha512-M26qDE6UkQbZA2mQ3RjJ3Gzd8TxP+/0obMgE5HfkfLhEEyYE3Bui4A5XHiGPjy0MUGAyxB3QgVuw2ciS0kHn6A==",
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "@lit/reactive-element": "^1.6.2 || ^2.1.0"
-      }
-    },
-    "node_modules/@lit/reactive-element": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/@lit/reactive-element/-/reactive-element-2.1.2.tgz",
-      "integrity": "sha512-pbCDiVMnne1lYUIaYNN5wrwQXDtHaYtg7YEFPeW+hws6U47WeFvISGUWekPGKWOP1ygrs0ef0o1VJMk1exos5A==",
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "@lit-labs/ssr-dom-shim": "^1.5.0"
-      }
-    },
     "node_modules/@marijn/find-cluster-break": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/@marijn/find-cluster-break/-/find-cluster-break-1.0.2.tgz",
@@ -2319,24 +2282,6 @@
         "@nextcloud/files": "^3.12.0"
       }
     },
-    "node_modules/@nextcloud/image-editor": {
-      "version": "1.0.0-beta.7",
-      "resolved": "https://registry.npmjs.org/@nextcloud/image-editor/-/image-editor-1.0.0-beta.7.tgz",
-      "integrity": "sha512-JZG4HCX3XMm2hc54xvEs8xPo60q4g+qvevJu7WWEAqeGTK3erl6q70224OhGC7gDijMZE+kC753WKpJLnYBMwA==",
-      "license": "AGPL-3.0-or-later",
-      "dependencies": {
-        "@nextcloud/l10n": "^3.4.0",
-        "konva": "~10.3.2"
-      },
-      "engines": {
-        "node": "^20.0.0 || ^22.0.0 || ^24.0.0"
-      },
-      "peerDependencies": {
-        "@nextcloud/dialogs": "^7.0.0",
-        "@nextcloud/vue": "^9.0.0",
-        "vue": "^3.5.0"
-      }
-    },
     "node_modules/@nextcloud/initial-state": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/@nextcloud/initial-state/-/initial-state-3.0.0.tgz",
@@ -2605,40 +2550,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@nextcloud/viewer": {
-      "version": "2.0.0-beta.18",
-      "resolved": "https://registry.npmjs.org/@nextcloud/viewer/-/viewer-2.0.0-beta.18.tgz",
-      "integrity": "sha512-keeVIGu1NgfhWwheA2EBvQqwU2ur61lOfg99GYjWNfJIgc+YKQKedh3kF6IK9DCyYRarwp4KD9wzmi6LEKlIpg==",
-      "license": "AGPL-3.0-or-later",
-      "dependencies": {
-        "@mdi/svg": "^7.4.47",
-        "@nextcloud/image-editor": "^1.0.0-beta.6",
-        "@nextcloud/logger": "^3.0.3",
-        "@nextcloud/vue": "^9.13.0",
-        "@videojs/html": "^10.0.1",
-        "debounce": "^3.0.0",
-        "dompurify": "^3.4.14",
-        "opensheetmusicdisplay": "^2.1.3",
-        "vue": "^3.5.0",
-        "vue-material-design-icons": "^5.3.1",
-        "webdav": "^5.10.0"
-      },
-      "engines": {
-        "node": "^24.0.0 || >=26.0.0"
-      },
-      "peerDependencies": {
-        "@nextcloud/axios": "^2.5.2",
-        "@nextcloud/capabilities": "^1.2.1",
-        "@nextcloud/dialogs": "^7.5.0",
-        "@nextcloud/event-bus": "^3.3.3",
-        "@nextcloud/files": "^4.0.0",
-        "@nextcloud/initial-state": "^3.0.0",
-        "@nextcloud/l10n": "^3.4.1",
-        "@nextcloud/paths": "^3.1.0",
-        "@nextcloud/router": "^3.1.0",
-        "@nextcloud/sharing": "^0.4.0 || ^1.0.0-beta.2"
-      }
-    },
     "node_modules/@nextcloud/vite-config": {
       "version": "2.5.4",
       "resolved": "https://registry.npmjs.org/@nextcloud/vite-config/-/vite-config-2.5.4.tgz",
@@ -4150,12 +4061,6 @@
       "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
       "license": "MIT"
     },
-    "node_modules/@types/vexflow": {
-      "version": "1.2.42",
-      "resolved": "https://registry.npmjs.org/@types/vexflow/-/vexflow-1.2.42.tgz",
-      "integrity": "sha512-bj3If1sm1FYJN0tJMV2BJNrwoeQ6xfrTt+rbmFvUytyxUhklLlW79MR4uwQ+upzrNJLVy012TnC7oZqSpEglSw==",
-      "license": "MIT"
-    },
     "node_modules/@types/web-bluetooth": {
       "version": "0.0.21",
       "resolved": "https://registry.npmjs.org/@types/web-bluetooth/-/web-bluetooth-0.0.21.tgz",
@@ -5996,7 +5901,7 @@
       "version": "1.5.1",
       "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
       "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
-      "devOptional": true,
+      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -6026,16 +5931,6 @@
         "node": ">=6.0.0"
       }
     },
-    "node_modules/bindings": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/bindings/-/bindings-1.5.0.tgz",
-      "integrity": "sha512-p2q/t/mhvuOj/UeLlV6566GD/guowlr0hHxClI0W9m7MWYkL1F0hLo+0Aexs9HSPCtR1SXQ0TD3MMKrXZajbiQ==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "file-uri-to-path": "1.0.0"
-      }
-    },
     "node_modules/birpc": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/birpc/-/birpc-2.9.0.tgz",
@@ -6045,40 +5940,6 @@
         "url": "https://github.com/sponsors/antfu"
       }
     },
-    "node_modules/bit-twiddle": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/bit-twiddle/-/bit-twiddle-1.0.2.tgz",
-      "integrity": "sha512-B9UhK0DKFZhoTFcfvAzhqsjStvGJp9vYWf3+6SNTtdSQnvIgfkHbgHrg/e4+TH71N2GDu8tpmCVoyfrL1d7ntA==",
-      "license": "MIT",
-      "optional": true
-    },
-    "node_modules/bl": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz",
-      "integrity": "sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "buffer": "^5.5.0",
-        "inherits": "^2.0.4",
-        "readable-stream": "^3.4.0"
-      }
-    },
-    "node_modules/bl/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
     "node_modules/blueimp-md5": {
       "version": "2.19.0",
       "resolved": "https://registry.npmjs.org/blueimp-md5/-/blueimp-md5-2.19.0.tgz",
@@ -6282,7 +6143,7 @@
       "version": "5.7.1",
       "resolved": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz",
       "integrity": "sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==",
-      "devOptional": true,
+      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -6582,16 +6443,6 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
-    "node_modules/chownr": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
-      "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==",
-      "license": "BlueOak-1.0.0",
-      "optional": true,
-      "engines": {
-        "node": ">=18"
-      }
-    },
     "node_modules/cipher-base": {
       "version": "1.0.7",
       "resolved": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.7.tgz",
@@ -7144,22 +6995,6 @@
         "url": "https://github.com/sponsors/wooorm"
       }
     },
-    "node_modules/decompress-response": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz",
-      "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "mimic-response": "^3.1.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/deep-equal": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/deep-equal/-/deep-equal-2.2.3.tgz",
@@ -7200,16 +7035,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/deep-extend": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz",
-      "integrity": "sha512-LOHxIOaPYdHlJRtCQfDIVZtfw/ufM8+rVj649RIHzcm/vGwQRXFt6OPqIFWsm2XEMrNIEtWR64sY1LEKD2vAOA==",
-      "license": "MIT",
-      "optional": true,
-      "engines": {
-        "node": ">=4.0.0"
-      }
-    },
     "node_modules/deep-is": {
       "version": "0.1.4",
       "resolved": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
@@ -7573,16 +7398,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/end-of-stream": {
-      "version": "1.4.5",
-      "resolved": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
-      "integrity": "sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "once": "^1.4.0"
-      }
-    },
     "node_modules/entities": {
       "version": "7.0.1",
       "resolved": "https://registry.npmjs.org/entities/-/entities-7.0.1.tgz",
@@ -7599,8 +7414,9 @@
       "version": "2.2.1",
       "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz",
       "integrity": "sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==",
-      "devOptional": true,
+      "dev": true,
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=6"
       }
@@ -8659,16 +8475,6 @@
         "safe-buffer": "^5.1.1"
       }
     },
-    "node_modules/expand-template": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz",
-      "integrity": "sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==",
-      "license": "(MIT OR WTFPL)",
-      "optional": true,
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/expect-type": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
@@ -8679,13 +8485,6 @@
         "node": ">=12.0.0"
       }
     },
-    "node_modules/exponential-backoff": {
-      "version": "3.1.3",
-      "resolved": "https://registry.npmjs.org/exponential-backoff/-/exponential-backoff-3.1.3.tgz",
-      "integrity": "sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==",
-      "license": "Apache-2.0",
-      "optional": true
-    },
     "node_modules/exsolve": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/exsolve/-/exsolve-1.0.8.tgz",
@@ -8882,13 +8681,6 @@
         "node": "^10.12.0 || >=12.0.0"
       }
     },
-    "node_modules/file-uri-to-path": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz",
-      "integrity": "sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==",
-      "license": "MIT",
-      "optional": true
-    },
     "node_modules/fill-range": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
@@ -9389,16 +9181,6 @@
       "license": "MIT",
       "peer": true
     },
-    "node_modules/glsl-tokenizer": {
-      "version": "2.1.5",
-      "resolved": "https://registry.npmjs.org/glsl-tokenizer/-/glsl-tokenizer-2.1.5.tgz",
-      "integrity": "sha512-XSZEJ/i4dmz3Pmbnpsy3cKh7cotvFlBiZnDOwnj/05EwNp2XrhQ4XKJxT7/pDt4kp4YcpRSKz8eTV7S+mwV6MA==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "through2": "^0.6.3"
-      }
-    },
     "node_modules/gopd": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
@@ -9772,7 +9554,7 @@
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
       "integrity": "sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==",
-      "devOptional": true,
+      "dev": true,
       "funding": [
         {
           "type": "github",
@@ -9800,12 +9582,6 @@
         "node": ">= 4"
       }
     },
-    "node_modules/immediate": {
-      "version": "3.0.6",
-      "resolved": "https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz",
-      "integrity": "sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==",
-      "license": "MIT"
-    },
     "node_modules/immutable": {
       "version": "5.1.9",
       "resolved": "https://registry.npmjs.org/immutable/-/immutable-5.1.9.tgz",
@@ -9901,7 +9677,7 @@
       "version": "1.3.8",
       "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",
       "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==",
-      "devOptional": true,
+      "dev": true,
       "license": "ISC"
     },
     "node_modules/inline-style-parser": {
@@ -10936,19 +10712,6 @@
       "license": "MIT",
       "peer": true
     },
-    "node_modules/loglevel": {
-      "version": "1.9.2",
-      "resolved": "https://registry.npmjs.org/loglevel/-/loglevel-1.9.2.tgz",
-      "integrity": "sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.6.0"
-      },
-      "funding": {
-        "type": "tidelift",
-        "url": "https://tidelift.com/funding/github/npm/loglevel"
-      }
-    },
     "node_modules/longest-streak": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz",
@@ -11871,19 +11634,6 @@
         "node": ">= 0.6"
       }
     },
-    "node_modules/mimic-response": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz",
-      "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==",
-      "license": "MIT",
-      "optional": true,
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/minimalistic-assert": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz",
@@ -11926,7 +11676,7 @@
       "version": "7.1.3",
       "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz",
       "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==",
-      "devOptional": true,
+      "dev": true,
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": ">=16 || 14 >=14.17"
@@ -11988,13 +11738,6 @@
       "integrity": "sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==",
       "license": "MIT"
     },
-    "node_modules/nan": {
-      "version": "2.30.0",
-      "resolved": "https://registry.npmjs.org/nan/-/nan-2.30.0.tgz",
-      "integrity": "sha512-P5mokDkSvCGBz6mZDD/2l+w9QoICRXdCyZ9ONGmTePr40oihJg3Kpn0YU3twKd6PJnwSlLBWNQeOT6yWEV2c4A==",
-      "license": "MIT",
-      "optional": true
-    },
     "node_modules/nanoid": {
       "version": "3.3.18",
       "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
@@ -12044,19 +11787,6 @@
       "integrity": "sha512-yFehXNWRs4cM0+dz7QxCd06hTbWbSkV0ISsqBfkntU6TOY4Qm3Q88fRRLOddkGh2Qq6dZvnKVAahfhjcUvLnyA==",
       "license": "MIT"
     },
-    "node_modules/node-abi": {
-      "version": "3.99.0",
-      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-3.99.0.tgz",
-      "integrity": "sha512-lLdwkeg2XUVPTHqWjPltTxH81zbQNbUWC+AEb9ni50KjxkUzAAx1HGtMT21sbntzfUGfIphhcklvs3imJeqDXw==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "semver": "^7.3.5"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/node-addon-api": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-7.1.1.tgz",
@@ -12404,16 +12134,6 @@
         "wrappy": "1"
       }
     },
-    "node_modules/once": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
-      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
-      "license": "ISC",
-      "optional": true,
-      "dependencies": {
-        "wrappy": "1"
-      }
-    },
     "node_modules/openapi-typescript": {
       "version": "7.13.0",
       "resolved": "https://registry.npmjs.org/openapi-typescript/-/openapi-typescript-7.13.0.tgz",
@@ -12448,22 +12168,6 @@
         "url": "https://github.com/chalk/supports-color?sponsor=1"
       }
     },
-    "node_modules/opensheetmusicdisplay": {
-      "version": "2.2.1",
-      "resolved": "https://registry.npmjs.org/opensheetmusicdisplay/-/opensheetmusicdisplay-2.2.1.tgz",
-      "integrity": "sha512-2DqI2lQKKzDDoIe7yD8yNyWTofSdRbFZYTD3nGRzEo1XmTK2DJWcUXLRXZ2E5xzOt7Pd+RmSGL1quFQZRCqDMw==",
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "@types/vexflow": "^1.2.38",
-        "jszip": "3.10.1",
-        "loglevel": "^1.8.0",
-        "typescript-collections": "^1.3.3",
-        "vexflow": "1.2.93"
-      },
-      "optionalDependencies": {
-        "gl": "^9.0.0-rc.10"
-      }
-    },
     "node_modules/optionator": {
       "version": "0.9.4",
       "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
@@ -12602,6 +12306,7 @@
       "version": "1.0.11",
       "resolved": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz",
       "integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==",
+      "dev": true,
       "license": "(MIT AND Zlib)"
     },
     "node_modules/parent-module": {
@@ -13085,34 +12790,6 @@
       "license": "MIT",
       "peer": true
     },
-    "node_modules/prebuild-install": {
-      "version": "7.1.3",
-      "resolved": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.3.tgz",
-      "integrity": "sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==",
-      "deprecated": "No longer maintained. Please contact the author of the relevant native addon; alternatives are available.",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "detect-libc": "^2.0.0",
-        "expand-template": "^2.0.3",
-        "github-from-package": "0.0.0",
-        "minimist": "^1.2.3",
-        "mkdirp-classic": "^0.5.3",
-        "napi-build-utils": "^2.0.0",
-        "node-abi": "^3.3.0",
-        "pump": "^3.0.0",
-        "rc": "^1.2.7",
-        "simple-get": "^4.0.0",
-        "tar-fs": "^2.0.0",
-        "tunnel-agent": "^0.6.0"
-      },
-      "bin": {
-        "prebuild-install": "bin.js"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/prelude-ls": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.2.1.tgz",
@@ -13152,16 +12829,6 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
-    "node_modules/proc-log": {
-      "version": "6.1.0",
-      "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz",
-      "integrity": "sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==",
-      "license": "ISC",
-      "optional": true,
-      "engines": {
-        "node": "^20.17.0 || >=22.9.0"
-      }
-    },
     "node_modules/process": {
       "version": "0.11.10",
       "resolved": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
@@ -13224,17 +12891,6 @@
       "integrity": "sha512-fGTi3gxV/23FTYdAoUtLYp6qySe2KE3teyZitipKNRuVYcBkoP/bB3guXN/XVKUe9mxCHXnc9C4ocyz8OmgN0g==",
       "license": "MIT"
     },
-    "node_modules/pump": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/pump/-/pump-3.0.4.tgz",
-      "integrity": "sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "end-of-stream": "^1.1.0",
-        "once": "^1.3.1"
-      }
-    },
     "node_modules/punycode": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
@@ -13357,41 +13013,6 @@
         "safe-buffer": "^5.1.0"
       }
     },
-    "node_modules/rc": {
-      "version": "1.2.8",
-      "resolved": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz",
-      "integrity": "sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==",
-      "license": "(BSD-2-Clause OR MIT OR Apache-2.0)",
-      "optional": true,
-      "dependencies": {
-        "deep-extend": "^0.6.0",
-        "ini": "~1.3.0",
-        "minimist": "^1.2.0",
-        "strip-json-comments": "~2.0.1"
-      },
-      "bin": {
-        "rc": "cli.js"
-      }
-    },
-    "node_modules/react": {
-      "version": "19.3.1",
-      "resolved": "https://registry.npmjs.org/react/-/react-19.3.1.tgz",
-      "integrity": "sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw==",
-      "license": "MIT",
-      "peer": true,
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
-    "node_modules/react-compiler-runtime": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/react-compiler-runtime/-/react-compiler-runtime-1.0.0.tgz",
-      "integrity": "sha512-rRfjYv66HlG8896yPUDONgKzG5BxZD1nV9U6rkm+7VCuvQc903C4MjcoZR4zPw53IKSOX9wMQVpA1IAbRtzQ7w==",
-      "license": "MIT",
-      "peerDependencies": {
-        "react": "^17.0.0 || ^18.0.0 || ^19.0.0 || ^0.0.0-experimental"
-      }
-    },
     "node_modules/react-is": {
       "version": "17.0.2",
       "resolved": "https://registry.npmjs.org/react-is/-/react-is-17.0.2.tgz",
@@ -14622,6 +14243,7 @@
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz",
       "integrity": "sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==",
+      "dev": true,
       "license": "MIT"
     },
     "node_modules/sha.js": {
@@ -14763,65 +14385,12 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/signal-polyfill": {
-      "version": "0.2.2",
-      "resolved": "https://registry.npmjs.org/signal-polyfill/-/signal-polyfill-0.2.2.tgz",
-      "integrity": "sha512-p63Y4Er5/eMQ9RHg0M0Y64NlsQKpiu6MDdhBXpyywRuWiPywhJTpKJ1iB5K2hJEbFZ0BnDS7ZkJ+0AfTuL37Rg==",
-      "license": "Apache-2.0"
-    },
     "node_modules/signature_pad": {
       "version": "5.1.3",
       "resolved": "https://registry.npmjs.org/signature_pad/-/signature_pad-5.1.3.tgz",
       "integrity": "sha512-zyxW5vuJVnQdGcU+kAj9FYl7WaAunY3kA5S7mPg0xJiujL9+sPAWfSQHS5tXaJXDUa4FuZeKhfdCDQ6K3wfkpQ==",
       "license": "MIT"
     },
-    "node_modules/simple-concat": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz",
-      "integrity": "sha512-cSFtAPtRhljv69IK0hTVZQ+OfE9nePi/rtJmw5UjHeVyVroEqJXP1sFztKUy1qU+xvz3u/sfYJLa947b7nAN2Q==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT",
-      "optional": true
-    },
-    "node_modules/simple-get": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz",
-      "integrity": "sha512-brv7p5WgH0jmQJr1ZDDfKDOSeWWg+OVypG99A/5vYGPqJ6pxiaHLy8nxtFjBA7oMa01ebA9gfh1uMCFqOuXxvA==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "decompress-response": "^6.0.0",
-        "once": "^1.3.1",
-        "simple-concat": "^1.0.0"
-      }
-    },
     "node_modules/slash": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz",
@@ -16192,19 +15761,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/tunnel-agent": {
-      "version": "0.6.0",
-      "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
-      "integrity": "sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==",
-      "license": "Apache-2.0",
-      "optional": true,
-      "dependencies": {
-        "safe-buffer": "^5.0.1"
-      },
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/type-check": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz",
@@ -17778,7 +17334,7 @@
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
       "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==",
-      "devOptional": true,
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.4"
diff --git a/src/components/RightSidebar/EnvelopeFilesList.vue b/src/components/RightSidebar/EnvelopeFilesList.vue
index 8cec01c337..dac9a3f02f 100644
--- a/src/components/RightSidebar/EnvelopeFilesList.vue
+++ b/src/components/RightSidebar/EnvelopeFilesList.vue
@@ -432,7 +432,7 @@ function getPreviewUrl(file: Partial<EnvelopeFile> & { id?: number; nodeId?: num
 
 function openFile(file: EnvelopeFile) {
 	const fileUrl = generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: file.uuid })
-	return openDocument({
+	openDocument({
 		fileUrl,
 		filename: file.name || '',
 		nodeId: file.id,
diff --git a/src/components/RightSidebar/RequestSignatureTab.vue b/src/components/RightSidebar/RequestSignatureTab.vue
index 23b173ff8a..4b0074754f 100644
--- a/src/components/RightSidebar/RequestSignatureTab.vue
+++ b/src/components/RightSidebar/RequestSignatureTab.vue
@@ -1150,7 +1150,7 @@ function openFile() {
 		return
 	}
 
-	return openDocument({
+	openDocument({
 		fileUrl,
 		filename: file.name,
 		nodeId: file.nodeId,
diff --git a/src/tests/testHelpers/nextcloudMocks.js b/src/tests/testHelpers/nextcloudMocks.js
index 924522f22d..029334c888 100644
--- a/src/tests/testHelpers/nextcloudMocks.js
+++ b/src/tests/testHelpers/nextcloudMocks.js
@@ -57,13 +57,3 @@ global.OCP = global.OCP ?? {
 }
 
 global.window._oc_webroot = '/'
-
-// The Viewer reads Nextcloud's preview MIME capabilities during module imports.
-// Provide a preview-enabled test server instead of intercepting its warnings.
-global.window._oc_capabilities = {
-	core: {
-		previews: {
-			enabled_providers: ['^image/'],
-		},
-	},
-}
diff --git a/src/tests/utils/viewer.spec.ts b/src/tests/utils/viewer.spec.ts
index 0cb10c8317..b0809ad2f6 100644
--- a/src/tests/utils/viewer.spec.ts
+++ b/src/tests/utils/viewer.spec.ts
@@ -3,72 +3,108 @@
  * SPDX-License-Identifier: AGPL-3.0-or-later
  */
 
-import { describe, expect, it, vi, beforeEach, afterEach } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => ({ getCurrentUser: vi.fn() }))
+vi.mock('@nextcloud/auth', () => ({ getCurrentUser: mocks.getCurrentUser }))
+
 import { openDocument } from '../../utils/viewer.js'
 
-describe('openDocument on Nextcloud 36', () => {
-	let viewerOpen: ReturnType<typeof vi.fn>
-	let windowOpen: ReturnType<typeof vi.spyOn>
+type LegacyViewer = {
+	availableHandlers?: Array<{ id: string; mimes?: string[] }>
+	open?: ReturnType<typeof vi.fn>
+	openWith?: ReturnType<typeof vi.fn>
+}
+type GlobalWithOCA = typeof globalThis & { OCA?: { Viewer?: LegacyViewer } }
+
+describe('openDocument on Nextcloud 33-35', () => {
+	let originalOCA: GlobalWithOCA['OCA']
+	let openSpy: ReturnType<typeof vi.spyOn>
+	let viewer: Required<LegacyViewer>
 
 	beforeEach(() => {
-		originalOCA = (global as GlobalWithOCA).OCA
+		originalOCA = (globalThis as GlobalWithOCA).OCA
 		openSpy = vi.spyOn(window, 'open').mockImplementation(() => null)
+		mocks.getCurrentUser.mockReturnValue({ uid: 'signer' })
+		viewer = {
+			availableHandlers: [
+				{ id: 'eurooffice', mimes: ['application/pdf'] },
+				{ id: 'pdf', mimes: ['application/pdf'] },
+			],
+			open: vi.fn(),
+			openWith: vi.fn(),
+		}
+		;(globalThis as GlobalWithOCA).OCA = { Viewer: viewer }
 	})
 
 	afterEach(() => {
-		windowOpen.mockRestore()
+		openSpy.mockRestore()
+		;(globalThis as GlobalWithOCA).OCA = originalOCA
+		vi.clearAllMocks()
 	})
 
-	it('uses Nextcloud Viewer when available', () => {
-		const viewerOpen = vi.fn()
-		;(global as GlobalWithOCA).OCA = {
-			Viewer: {
-				open: viewerOpen,
-			},
-		}
-
-		await openDocument({ fileUrl: url, filename: 'signed.pdf', nodeId: 42 })
-
+	it.each(['owner', 'signer without access to the original'])('uses native PDF handler without original fileid for %s', () => {
 		openDocument({
-			fileUrl: file.url,
-			filename: file.filename,
-			nodeId: file.nodeId,
+			fileUrl: '/index.php/apps/libresign/p/pdf/signed-uuid',
+			filename: 'signed.pdf',
+			nodeId: 123,
 		})
+		expect(viewer.openWith).toHaveBeenCalledOnce()
+		const [id, options] = viewer.openWith.mock.calls[0]
+		expect(id).toBe('pdf')
+		expect(options.fileInfo).toEqual({
+			source: '/index.php/apps/libresign/p/pdf/signed-uuid',
+			basename: 'signed.pdf',
+			mime: 'application/pdf',
+		})
+		expect(options.list).toEqual([options.fileInfo])
+		expect(viewer.open).not.toHaveBeenCalled()
+		expect(openSpy).not.toHaveBeenCalled()
+	})
 
-		expect(viewerOpen).toHaveBeenCalledTimes(1)
-		const payload = viewerOpen.mock.calls[0]?.[0]
-		if (payload) {
-			expect(payload.fileInfo.basename).toBe('doc.pdf')
-			expect(payload.fileInfo.fileid).toBe(123)
-			expect(payload.fileInfo.mime).toBe('application/pdf')
-			expect(payload.fileInfo.source).toContain('/index.php/apps/files/')
-		}
+	it('falls back on public pages even if the PDF handler is registered', () => {
+		mocks.getCurrentUser.mockReturnValue(null)
+		openDocument({ fileUrl: '/apps/libresign/p/pdf/signed-uuid', filename: 'signed.pdf', nodeId: 123 })
+		expect(viewer.openWith).not.toHaveBeenCalled()
+		expect(openSpy).toHaveBeenCalledOnce()
+		expect(new URL(openSpy.mock.calls[0][0] as string).pathname).toBe('/apps/libresign/p/pdf/signed-uuid')
 	})
 
-	it('selects PDF.js even when an Office handler has higher priority', async () => {
-		const officeEnabled = vi.fn(() => true)
-		mocks.getHandlers.mockReturnValue(new Map([
-			['eurooffice', { id: 'eurooffice', enabled: officeEnabled }],
-			['pdf', { id: 'pdf', enabled: () => true }],
-		]))
+	it('does not let Office handlers handle signed UUID PDFs', () => {
+		viewer.availableHandlers = [{ id: 'eurooffice', mimes: ['application/pdf'] }]
+		openDocument({ fileUrl: '/apps/libresign/p/pdf/signed-uuid', filename: 'signed.pdf', nodeId: 456 })
+		expect(viewer.openWith).not.toHaveBeenCalled()
+		expect(viewer.open).not.toHaveBeenCalled()
+		expect(openSpy).toHaveBeenCalledOnce()
+	})
 
-		const file = {
-			filename: 'doc.pdf',
-			nodeId: 456,
-			url: '/apps/files/?file=/doc.pdf',
-		}
+	it('falls back when the Viewer is not installed', () => {
+		;(globalThis as GlobalWithOCA).OCA = undefined
+		openDocument({ fileUrl: '/apps/libresign/p/pdf/signed-uuid?download=1', filename: 'signed.pdf' })
+		const url = new URL(openSpy.mock.calls[0][0] as string)
+		expect(url.searchParams.get('download')).toBe('1')
+		expect(url.searchParams.get('_t')).toMatch(/^\d+$/)
+	})
 
-		openDocument({
-			fileUrl: file.url,
-			filename: file.filename,
-			nodeId: file.nodeId,
+	it('keeps the original file ID for ordinary Nextcloud documents', () => {
+		openDocument({ fileUrl: '/apps/files/?file=/contract.pdf', filename: 'contract.pdf', nodeId: 123 })
+		expect(viewer.open).toHaveBeenCalledWith({
+			fileInfo: { source: '/apps/files/?file=/contract.pdf', basename: 'contract.pdf', mime: 'application/pdf', fileid: 123 },
+			list: [{ source: '/apps/files/?file=/contract.pdf', basename: 'contract.pdf', mime: 'application/pdf', fileid: 123 }],
 		})
+		expect(viewer.openWith).not.toHaveBeenCalled()
+	})
 
-		expect(openSpy).toHaveBeenCalledTimes(1)
-		const openedUrl = openSpy.mock.calls[0]?.[0]
-		if (openedUrl) {
-			expect(openedUrl).toContain('/apps/files/?file=/doc.pdf')
-			expect(openedUrl).toMatch(/_t=\d+$/)
-		}
+	it('opens external URLs directly instead of giving them to local handlers', () => {
+		openDocument({ fileUrl: 'https://example.test/file.pdf?lang=pt', filename: 'external.pdf', nodeId: 123 })
+		expect(viewer.open).not.toHaveBeenCalled()
+		expect(viewer.openWith).not.toHaveBeenCalled()
+		expect(new URL(openSpy.mock.calls[0][0] as string).hostname).toBe('example.test')
+	})
+
+	it('propagates Viewer errors rather than silently opening another window', () => {
+		viewer.openWith.mockImplementation(() => { throw new Error('Viewer failed') })
+		expect(() => openDocument({ fileUrl: '/apps/libresign/p/pdf/signed-uuid', filename: 'signed.pdf' })).toThrow('Viewer failed')
+		expect(openSpy).not.toHaveBeenCalled()
 	})
 })
diff --git a/src/utils/viewer.js b/src/utils/viewer.js
index 05ac3b534c..3ecfdad1c8 100644
--- a/src/utils/viewer.js
+++ b/src/utils/viewer.js
@@ -3,61 +3,47 @@
  * SPDX-License-Identifier: AGPL-3.0-or-later
  */
 
-/**
- * Construct a read-only file for a URL supplied by LibreSign. In particular,
- * the file ID of an unsigned original must not be attached to a signed PDF
- * served by LibreSign's UUID endpoint.
- *
- * @param {URL} url The absolute document URL
- * @param {string} filename Display name
- * @param {string} mime MIME type
- * @param {number | undefined} nodeId The user's accessible DAV node ID, if any
- * @return {File} A viewable file
- */
-const createViewerFile = (url, filename, mime, nodeId) => {
-	const currentUser = getCurrentUser()
-	const davUser = decodeURIComponent(url.pathname).match(/\/remote\.php\/dav\/files\/([^/]+)(?:\/|$)/)?.[1]
-	const isOwnDavFile = davUser !== undefined && davUser === currentUser?.uid
-	const hasAccessibleId = isOwnDavFile && Number.isSafeInteger(nodeId) && nodeId > 0
-
-	return new File({
-		source: url.href,
-		root: isOwnDavFile ? `/files/${davUser}` : '/',
-		owner: isOwnDavFile ? davUser : null,
-		displayname: filename,
-		mime,
-		permissions: Permission.READ,
-		...(hasAccessibleId ? { id: String(nodeId) } : {}),
-	})
-}
+import { getCurrentUser } from '@nextcloud/auth'
 
 /**
- * Opens a document using Nextcloud Viewer or in a new window
+ * Open a document through the Nextcloud 33-35 Viewer where possible.
  *
- * Without a node ID the Viewer is skipped as well: some Viewer handlers
- * (e.g. Euro-Office/ONLYOFFICE) ignore `source` and resolve `fileid` in the
- * current user's filesystem, so they must only receive a node the current
- * user can access.
+ * Signed PDFs are resolved by LibreSign's UUID endpoint, not by the original
+ * owner's file ID. Selecting the native PDF handler avoids Office handlers
+ * trying to look up that ID in the signer's filesystem.
  *
- * @param {object} options - Options for opening the document
- * @param {string} options.fileUrl - The URL of the file to open
- * @param {string} options.filename - The name of the file
- * @param {number} options.nodeId - The Nextcloud node ID
- * @param {string} [options.mime='application/pdf'] - The MIME type
+ * @param {object} options Document options
+ * @param {string} options.fileUrl File URL
+ * @param {string} options.filename Display name
+ * @param {number} [options.nodeId] Nextcloud file ID for ordinary documents
+ * @param {string} [options.mime] MIME type
  */
 export const openDocument = ({ fileUrl, filename, nodeId, mime = 'application/pdf' }) => {
-	const source = extractRelativePath(fileUrl)
+	const url = new URL(fileUrl, window.location.origin)
+	const isSameOrigin = url.origin === window.location.origin
+	const isSignedPdf = isSameOrigin && mime === 'application/pdf'
+		&& /\/apps\/libresign\/p\/pdf\/[^/]+$/.test(url.pathname)
+	const viewer = globalThis.OCA?.Viewer
+	const source = isSameOrigin ? url.pathname + url.search + url.hash : url.href
 
-	if (OCA?.Viewer !== undefined) {
-		const fileInfo = {
-			source,
-			basename: filename,
-			mime,
-			fileid: nodeId,
+	if (isSignedPdf) {
+		// The legacy Viewer probes authenticated Files APIs on public pages.
+		// Anonymous visitors must use the direct PDF URL instead.
+		const pdfHandler = viewer?.availableHandlers?.some(handler =>
+			handler.id === 'pdf' && handler.mimes?.includes(mime))
+		if (getCurrentUser() !== null && pdfHandler) {
+			const fileInfo = { source, basename: filename, mime }
+			viewer.openWith('pdf', { fileInfo, list: [fileInfo], enableSidebar: false })
+			return
 		}
+	} else if (viewer && isSameOrigin) {
+		// Keep the existing Viewer behavior for ordinary documents and their IDs.
+		const fileInfo = { source, basename: filename, mime, fileid: nodeId }
+		viewer.open({ fileInfo, list: [fileInfo] })
+		return
 	}
 
-	// Fallback is for unavailable handlers only. Viewer failures must surface.
+	// Use direct opening only without a suitable Viewer. Do not swallow errors.
 	url.searchParams.set('_t', String(Date.now()))
 	window.open(url.href)
 }
diff --git a/src/views/Documents/IdDocsValidation.vue b/src/views/Documents/IdDocsValidation.vue
index 380dc5028f..a3729232c7 100644
--- a/src/views/Documents/IdDocsValidation.vue
+++ b/src/views/Documents/IdDocsValidation.vue
@@ -421,7 +421,7 @@ function openFile(doc: IdDocEntry) {
 		return
 	}
 
-	return openDocument({
+	openDocument({
 		fileUrl,
 		filename: doc.file.name,
 		nodeId: doc.file.file.nodeId,
diff --git a/src/views/FilesList/FileEntry/FileEntryActions.vue b/src/views/FilesList/FileEntry/FileEntryActions.vue
index 342ec82d4d..35e5cf3964 100644
--- a/src/views/FilesList/FileEntry/FileEntryActions.vue
+++ b/src/views/FilesList/FileEntry/FileEntryActions.vue
@@ -214,7 +214,7 @@ async function onActionClick(action: Pick<MenuAction, 'id'>) {
 	} else if (action.id === 'rename') {
 		emit('start-rename')
 	} else if (action.id === 'open') {
-		await openFile()
+		openFile()
 	}
 }
 
@@ -228,7 +228,7 @@ function openFile() {
 	const fileUrl = props.source.file
 		|| generateUrl('/apps/libresign/p/pdf/{uuid}', { uuid: props.source.uuid })
 
-	return openDocument({
+	openDocument({
 		fileUrl,
 		filename: props.source.name,
 		nodeId: props.source.nodeId ?? 0,
diff --git a/src/views/Settings/CertificatePolicy.vue b/src/views/Settings/CertificatePolicy.vue
index b5c6f5f8f4..30555f13fd 100644
--- a/src/views/Settings/CertificatePolicy.vue
+++ b/src/views/Settings/CertificatePolicy.vue
@@ -126,7 +126,7 @@ function emitValidity() {
 }
 
 function view() {
-	return openDocument({
+	openDocument({
 		fileUrl: CPS.value,
 		filename: 'Certificate Policy',
 		nodeId: 0,

From 877efdd5fb9f704164781ddd29d30a7603d95795 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Wed, 21 Oct 2026 00:11:32 +0000
Subject: [PATCH 11/11] test(validation): check anonymous signed PDF fallback
 on stable33

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 ...-unauthenticated-visible-signature.spec.ts | 35 +++----------------
 1 file changed, 5 insertions(+), 30 deletions(-)

diff --git a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
index 407cf13e79..9a56762495 100644
--- a/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
+++ b/playwright/e2e/sign-envelope-unauthenticated-visible-signature.spec.ts
@@ -240,8 +240,6 @@ test('unauthenticated signer can define a visible signature for an envelope with
 
 	await test.step('The signed PDF opens by UUID without using an Office handler', async () => {
 		const context = page.context()
-		const openedPopups: Page[] = []
-		page.on('popup', popup => { openedPopups.push(popup) })
 		const officeRequests: string[] = []
 		context.on('request', request => {
 			if (request.url().includes('/apps/eurooffice/')) {
@@ -249,9 +247,9 @@ test('unauthenticated signer can define a visible signature for an envelope with
 			}
 		})
 
-		// CI checks out Nextcloud's source without installing files_pdfviewer.
-		// The Viewer opens PDFs when its handler is registered; otherwise the
-		// supported fallback opens the same signed UUID URL in another tab.
+		// The legacy Viewer cannot load anonymous PDFs through authenticated
+		// Files APIs. Check the direct URL fallback in this public signing flow.
+		const popupPromise = page.waitForEvent('popup')
 		const pdfResponse = context.waitForEvent('response', response =>
 			response.request().method() === 'GET'
 			&& response.url().includes('/apps/libresign/p/pdf/'),
@@ -259,36 +257,13 @@ test('unauthenticated signer can define a visible signature for an envelope with
 		await page.getByRole('button', { name: 'Show details' }).first().click()
 		await page.getByRole('button', { name: 'View document' }).first().click()
 
+		const popup = await popupPromise
+		expect(await popup.opener()).toBe(page)
 		const response = await pdfResponse
 		expect(response.status()).toBe(200)
 		expect(response.headers()['content-type']).toContain('application/pdf')
 		expect(new URL(response.url()).pathname).toMatch(/\/apps\/libresign\/p\/pdf\/[^/]+$/)
 
-		// In Chromium the PDF response can arrive before the popup is reported.
-		// Wait for the actual presentation, not an immediate context.pages() snapshot.
-		const nativeViewer = page.locator('[role="dialog"][data-handler="pdf"]')
-		await expect.poll(async () =>
-			await nativeViewer.isVisible() || openedPopups.length > 0,
-		{ timeout: 15_000 }).toBe(true)
-
-		if (await nativeViewer.isVisible()) {
-			expect(openedPopups).toHaveLength(0)
-			await expect(nativeViewer).toBeVisible()
-			await expect.poll(async () => {
-				const pdfFrame = page.frames().find(frame => frame.url().includes('/apps/files_pdfviewer/'))
-				return pdfFrame?.evaluate(() => {
-					const pdf = (window as typeof window & {
-						PDFViewerApplication?: { pdfDocument?: { numPages?: number } }
-					}).PDFViewerApplication
-					return pdf?.pdfDocument?.numPages ?? 0
-				}) ?? 0
-			}, { timeout: 15_000 }).toBeGreaterThan(0)
-		} else {
-			// Chromium headless can download inline PDFs rather than navigating
-			// the popup, so validate the response URL and signed bytes below.
-			expect(openedPopups).toHaveLength(1)
-		}
-
 		const signedPdf = await page.request.get(response.url())
 		expect(signedPdf.status()).toBe(200)
 		expect((await signedPdf.body()).toString('latin1')).toContain('/ByteRange')