Public sharing

Any dashboard can be shared via a hashed token.

1. On the dashboard page → Share → Create link.
2. Optionally: TTL (unlimited by default), viewer_label to track "who received it".
3. The plaintext token is shown ONCE — after that only the hash.
4. URL of the form /share/<token>.

Revocation

One click from the UI. revoked_at is set, the link stops working. The dashboard data itself remains.

What the viewer sees

• Layout + variables (read-only)
• Metrics (with a baked-in organization_id, spoofing is impossible)
• No info about the org / users / other dashboards
• No way to edit