Feature
Share a link,keep the keys.
A viewer link opens the design and writes nothing — the server refuses the write. An editor link can carry permission areas, so the gardener gets the garden and nothing else. Opening ?design=<url> signs you in silently if you're already a castomo user.
The easy explanation
Two roles. Five areas.
A viewer sees everything and changes nothing — the write is refused where the design lives, not just hidden in the interface. An editor gets the areas you tick: the outside, the inside, the garden, colours & finishes anywhere, light & weather. Tick none and the share covers the whole design.
Viewer writes nothing
Not "shouldn't" — the server refuses the write. Read-only is a fact about the design, not a promise about manners.
Editor permission areas
Scope a share to the outside, the inside, the garden, colours & finishes anywhere, or light & weather.
Empty means everything
No areas ticked? The editor share covers the whole design — walls, roof, furniture, plot.
Silent sign-in
OAuth with a hidden iframe re-auths your castomo account — no login screen when you're signed in elsewhere in the estate.
Who can do what.
| Viewer link | Editor link | |
|---|---|---|
| Open a design from ?design=<url> | ✓ | ✓ |
| Look around — orbit, walk, play the day | ✓ | ✓ |
| Write to the design | ✗ — refused by the server | ✓ |
| Stay inside the ticked areas | — | ✓ judged per change |
| Change something outside their areas | ✗ | ✗ — the change is judged, not the label |
- Permission areas are judged client-side against what a change actually touches — nothing reads a sender's label
- One URL shape:
https://builder.castomo.com/editor/?design=<url>— the shared design opens like any other - Silent re-auth in a hidden iframe — signed in anywhere in the castomo estate, you never see a login form
"A viewer link is a window. An editor link is a door — to the rooms you chose."
— share linksA note on trust
The server has never heard of "trust me".
Viewer writes are refused where the design lives. Editor areas are judged against what a change actually touches — a relabelled change stays outside the fence, and empty areas mean the whole design.
Share your designShare the link.
Keep the keys.
Viewer or editor, permission areas, silent sign-in — and ?design=<url> opens the design like any other.