@percher/shared 1.1.0 → 1.3.0

package/dist/verified-signup.d.ts

@@ -0,0 +1,24 @@
+export interface SignupQuotaConnection {
+    run(query: string, params?: (string | number | null)[]): void;
+    get<T>(query: string, params?: (string | number | null)[]): T | undefined;
+}
+export declare class VerifiedSignupLimitError extends Error {
+    readonly code = "DAILY_CAP";
+    constructor();
+}
+/** Distinct namespace: historical pending-account totals remain unchanged. */
+export declare function verifiedSignupQuota(db: SignupQuotaConnection, now?: Date): {
+    day: string;
+    count: number;
+    limit: number | null;
+    remaining: number | null;
+    resetAt: number;
+};
+/** Caller holds an immediate transaction covering this charge and verification. */
+export declare function chargeVerifiedSignup(db: SignupQuotaConnection, now?: Date): void;
+/** One-time upgrade repair. Caller holds the same writer transaction as admission.
+ * Snapshot pre-existing identity-bound proof before any new verification write.
+ * Absent dashboard schema is not a completed cutover. Invalid schema must fail.
+ */
+export declare function initializeVerifiedSignupCutover(db: SignupQuotaConnection, now: Date): void;
+//# sourceMappingURL=verified-signup.d.ts.map

package/dist/verified-signup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-signup.d.ts","sourceRoot":"","sources":["../src/verified-signup.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;IAC9D,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC;CAC3E;AACD,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,eAAe;IAC5B,cAIC;CACF;AACD,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,qBAAqB,EAAE,GAAG,OAAa;;;;;;EAyB9E;AACD,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,qBAAqB,EAAE,GAAG,OAAa,QAY/E;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE,IAAI,GAAG,IAAI,CAwB1F"}

package/dist/verified-signup.js

@@ -0,0 +1,58 @@
+import { signupDayWindow } from "./signup-day.js";
+export class VerifiedSignupLimitError extends Error {
+    code = "DAILY_CAP";
+    constructor() {
+        super("Today's registration quota is full. Try this link again tomorrow; request a new verification email if it has expired.");
+    }
+}
+/** Distinct namespace: historical pending-account totals remain unchanged. */
+export function verifiedSignupQuota(db, now = new Date()) {
+    const { day, startMs, endMs } = signupDayWindow(now);
+    const key = `verified:${day}`;
+    const stored = db.get("SELECT count FROM signup_daily_registrations WHERE day = ?", [key]);
+    const count = stored?.count ??
+        db.get("SELECT COUNT(*) AS count FROM users WHERE email_verified_at >= ? AND email_verified_at < ?", [Math.floor(startMs / 1000), Math.floor(endMs / 1000)])?.count ??
+        0;
+    const raw = db.get("SELECT value FROM platform_flags WHERE key = 'signup_daily_cap'")?.value;
+    const limit = raw && /^\d{1,9}$/.test(raw) && Number(raw) > 0 ? Number(raw) : null;
+    return {
+        day,
+        count,
+        limit,
+        remaining: limit === null ? null : Math.max(0, limit - count),
+        resetAt: endMs,
+    };
+}
+/** Caller holds an immediate transaction covering this charge and verification. */
+export function chargeVerifiedSignup(db, now = new Date()) {
+    const quota = verifiedSignupQuota(db, now);
+    const key = `verified:${quota.day}`;
+    db.run("INSERT INTO signup_daily_registrations(day,count) VALUES(?,?) ON CONFLICT(day) DO NOTHING", [key, quota.count]);
+    const charged = db.get("UPDATE signup_daily_registrations SET count=count+1 WHERE day=? AND (? IS NULL OR count < ?) RETURNING day", [key, quota.limit, quota.limit]);
+    if (!charged)
+        throw new VerifiedSignupLimitError();
+}
+/** One-time upgrade repair. Caller holds the same writer transaction as admission.
+ * Snapshot pre-existing identity-bound proof before any new verification write.
+ * Absent dashboard schema is not a completed cutover. Invalid schema must fail.
+ */
+export function initializeVerifiedSignupCutover(db, now) {
+    const marker = "verified_signup_cutover_v1";
+    if (db.get("SELECT value FROM platform_flags WHERE key=?", [marker]))
+        return;
+    if (!db.get("SELECT name FROM sqlite_master WHERE type='table' AND name='auth_user'"))
+        return;
+    db.get("SELECT id,email,percher_user_id,email_verified FROM auth_user LIMIT 0");
+    const quota = verifiedSignupQuota(db, now);
+    const key = `verified:${quota.day}`;
+    db.run("INSERT INTO signup_daily_registrations(day,count) VALUES(?,?) ON CONFLICT(day) DO NOTHING", [key, quota.count]);
+    const predicate = "email_verified_at IS NULL AND status!='deleting' AND EXISTS (SELECT 1 FROM auth_user a WHERE a.percher_user_id=users.id AND lower(a.email)=lower(users.email) AND a.email_verified=1)";
+    const repaired = db.get(`SELECT COUNT(*) AS count FROM users WHERE ${predicate}`)?.count ?? 0;
+    db.run(`UPDATE users SET email_verified_at=?,status=CASE WHEN status='pending' AND accepted_terms_at IS NOT NULL THEN 'active' ELSE status END WHERE ${predicate}`, [Math.floor(now.getTime() / 1000)]);
+    db.run("INSERT INTO platform_flags(key,value,updated_at) VALUES(?,?,?)", [
+        marker,
+        JSON.stringify({ version: 1, at: now.getTime(), repaired }),
+        Math.floor(now.getTime() / 1000),
+    ]);
+}
+//# sourceMappingURL=verified-signup.js.map

package/dist/verified-signup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-signup.js","sourceRoot":"","sources":["../src/verified-signup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAM/C,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,GAAG,WAAW,CAAC;IAC5B;QACE,KAAK,CACH,uHAAuH,CACxH,CAAC;IACJ,CAAC;CACF;AACD,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,EAAyB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC7E,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CACnB,4DAA4D,EAC5D,CAAC,GAAG,CAAC,CACN,CAAC;IACF,MAAM,KAAK,GACT,MAAM,EAAE,KAAK;QACb,EAAE,CAAC,GAAG,CACJ,4FAA4F,EAC5F,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CACvD,EAAE,KAAK;QACR,CAAC,CAAC;IACJ,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAChB,iEAAiE,CAClE,EAAE,KAAK,CAAC;IACT,MAAM,KAAK,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,OAAO;QACL,GAAG;QACH,KAAK;QACL,KAAK;QACL,SAAS,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;QAC7D,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AACD,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,EAAyB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;IAC9E,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,GAAG,EAAE,CAAC;IACpC,EAAE,CAAC,GAAG,CACJ,2FAA2F,EAC3F,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CACnB,CAAC;IACF,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CACpB,4GAA4G,EAC5G,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAChC,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,wBAAwB,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,EAAyB,EAAE,GAAS;IAClF,MAAM,MAAM,GAAG,4BAA4B,CAAC;IAC5C,IAAI,EAAE,CAAC,GAAG,CAAC,8CAA8C,EAAE,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO;IAC7E,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,wEAAwE,CAAC;QAAE,OAAO;IAC9F,EAAE,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,GAAG,EAAE,CAAC;IACpC,EAAE,CAAC,GAAG,CACJ,2FAA2F,EAC3F,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CACnB,CAAC;IACF,MAAM,SAAS,GACb,uLAAuL,CAAC;IAC1L,MAAM,QAAQ,GACZ,EAAE,CAAC,GAAG,CAAoB,6CAA6C,SAAS,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IAClG,EAAE,CAAC,GAAG,CACJ,gJAAgJ,SAAS,EAAE,EAC3J,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CACnC,CAAC;IACF,EAAE,CAAC,GAAG,CAAC,gEAAgE,EAAE;QACvE,MAAM;QACN,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;KACjC,CAAC,CAAC;AACL,CAAC"}

package/dist/waitlist-token.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The personal "remove me" links for the two lists that hold an address
+ * until someone asks us to delete it: the pre-launch waitlist
+ * (`waitlist_signups`) and a closed tier's "tell me when it opens" list
+ * (`plan_interests`). A token names one row and proves the link came from
+ * Percher: `<rowId>.<mac>` for the waitlist, `plan.<rowId>.<mac>` for a plan
+ * interest. The mac is an HMAC of the row id under a key derived from the
+ * platform's internal secret with a fixed label per list, so the key is used
+ * for nothing else, no new secret has to be provisioned, and a token for one
+ * list never verifies for the other. The API builds the links (the waitlist
+ * export, the plan-interest emails) and the dashboard verifies them, so they
+ * live here once.
+ *
+ * A subpath export, never the barrel: `node:crypto` must not reach the
+ * dashboard's client bundle (see secure-compare.ts).
+ */
+declare const PURPOSES: {
+    readonly signup: {
+        readonly label: "percher-waitlist-removal-v1";
+        readonly prefix: "";
+    };
+    readonly plan_interest: {
+        readonly label: "percher-plan-interest-removal-v1";
+        readonly prefix: "plan.";
+    };
+};
+export type RemovalPurpose = keyof typeof PURPOSES;
+export declare function waitlistRemovalToken(secret: string, rowId: string): string;
+export declare function planInterestRemovalToken(secret: string, rowId: string): string;
+/**
+ * Which list and row a genuine token names, otherwise null. The prefix picks
+ * the label, and the label is part of the key, so moving a token to the other
+ * list by adding or dropping the prefix fails the mac.
+ */
+export declare function verifyRemovalToken(secret: string, token: string | null | undefined): {
+    purpose: RemovalPurpose;
+    rowId: string;
+} | null;
+/** The waitlist row id when the token is a genuine waitlist link, otherwise null. */
+export declare function verifyWaitlistRemovalToken(secret: string, token: string | null | undefined): string | null;
+/**
+ * The public page a token opens; `origin` is the dashboard origin. Both lists
+ * use the same page. The query name is `token` because Caddy's access-log
+ * filter blanks that name in the URI and the Referer (infra/Caddyfile.prod);
+ * a new name would be logged.
+ */
+export declare function waitlistRemovalUrl(origin: string, token: string): string;
+export {};
+//# sourceMappingURL=waitlist-token.d.ts.map

package/dist/waitlist-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"waitlist-token.d.ts","sourceRoot":"","sources":["../src/waitlist-token.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;GAeG;AACH,QAAA,MAAM,QAAQ;aACZ,MAAM;iBAAI,KAAK,EAAE,6BAA6B;iBAAE,MAAM,EAAE,EAAE;;aAC1D,aAAa;iBAAI,KAAK,EAAE,kCAAkC;iBAAE,MAAM,EAAE,OAAO;;CACnE,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,QAAQ,CAAC;AAcnD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B;IAAE,OAAO,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAUnD;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAExE"}

package/dist/waitlist-token.js

@@ -0,0 +1,71 @@
+import { createHmac } from "node:crypto";
+import { secretEquals } from "./secure-compare.js";
+/**
+ * The personal "remove me" links for the two lists that hold an address
+ * until someone asks us to delete it: the pre-launch waitlist
+ * (`waitlist_signups`) and a closed tier's "tell me when it opens" list
+ * (`plan_interests`). A token names one row and proves the link came from
+ * Percher: `<rowId>.<mac>` for the waitlist, `plan.<rowId>.<mac>` for a plan
+ * interest. The mac is an HMAC of the row id under a key derived from the
+ * platform's internal secret with a fixed label per list, so the key is used
+ * for nothing else, no new secret has to be provisioned, and a token for one
+ * list never verifies for the other. The API builds the links (the waitlist
+ * export, the plan-interest emails) and the dashboard verifies them, so they
+ * live here once.
+ *
+ * A subpath export, never the barrel: `node:crypto` must not reach the
+ * dashboard's client bundle (see secure-compare.ts).
+ */
+const PURPOSES = {
+    signup: { label: "percher-waitlist-removal-v1", prefix: "" },
+    plan_interest: { label: "percher-plan-interest-removal-v1", prefix: "plan." },
+};
+const MAC_CHARS = 32;
+function mac(secret, purpose, rowId) {
+    const key = createHmac("sha256", secret).update(PURPOSES[purpose].label).digest();
+    return createHmac("sha256", key).update(rowId).digest("base64url").slice(0, MAC_CHARS);
+}
+function removalToken(secret, purpose, rowId) {
+    if (!secret)
+        throw new Error("A removal token needs the internal secret");
+    return `${PURPOSES[purpose].prefix}${rowId}.${mac(secret, purpose, rowId)}`;
+}
+export function waitlistRemovalToken(secret, rowId) {
+    return removalToken(secret, "signup", rowId);
+}
+export function planInterestRemovalToken(secret, rowId) {
+    return removalToken(secret, "plan_interest", rowId);
+}
+/**
+ * Which list and row a genuine token names, otherwise null. The prefix picks
+ * the label, and the label is part of the key, so moving a token to the other
+ * list by adding or dropping the prefix fails the mac.
+ */
+export function verifyRemovalToken(secret, token) {
+    if (!secret || !token || token.length > 200)
+        return null;
+    const purpose = token.startsWith(PURPOSES.plan_interest.prefix)
+        ? "plan_interest"
+        : "signup";
+    const body = token.slice(PURPOSES[purpose].prefix.length);
+    const dot = body.lastIndexOf(".");
+    if (dot <= 0)
+        return null;
+    const rowId = body.slice(0, dot);
+    return secretEquals(body.slice(dot + 1), mac(secret, purpose, rowId)) ? { purpose, rowId } : null;
+}
+/** The waitlist row id when the token is a genuine waitlist link, otherwise null. */
+export function verifyWaitlistRemovalToken(secret, token) {
+    const verified = verifyRemovalToken(secret, token);
+    return verified?.purpose === "signup" ? verified.rowId : null;
+}
+/**
+ * The public page a token opens; `origin` is the dashboard origin. Both lists
+ * use the same page. The query name is `token` because Caddy's access-log
+ * filter blanks that name in the URI and the Referer (infra/Caddyfile.prod);
+ * a new name would be logged.
+ */
+export function waitlistRemovalUrl(origin, token) {
+    return `${origin.replace(/\/+$/, "")}/waitlist/leave?token=${encodeURIComponent(token)}`;
+}
+//# sourceMappingURL=waitlist-token.js.map

package/dist/waitlist-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"waitlist-token.js","sourceRoot":"","sources":["../src/waitlist-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,QAAQ,GAAG;IACf,MAAM,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,EAAE;IAC5D,aAAa,EAAE,EAAE,KAAK,EAAE,kCAAkC,EAAE,MAAM,EAAE,OAAO,EAAE;CACrE,CAAC;AAIX,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,SAAS,GAAG,CAAC,MAAc,EAAE,OAAuB,EAAE,KAAa;IACjE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAClF,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAAuB,EAAE,KAAa;IAC1E,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC1E,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,KAAa;IAChE,OAAO,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,KAAa;IACpE,OAAO,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,KAAgC;IAEhC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,OAAO,GAAmB,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;QAC7E,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,QAAQ,CAAC;IACb,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,KAAgC;IAEhC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,KAAa;IAC9D,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@percher/shared",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Shared constants and contracts (timeouts, etc.) used across the Percher CLI, API, MCP, and worker. Internal — values change in lockstep across packages.",
   "type": "module",
   "main": "./dist/index.js",
@@ -41,6 +41,11 @@
       "import": "./dist/secure-compare.js",
       "default": "./dist/secure-compare.js"
     },
+    "./waitlist-token": {
+      "types": "./dist/waitlist-token.d.ts",
+      "import": "./dist/waitlist-token.js",
+      "default": "./dist/waitlist-token.js"
+    },
     "./signup-invite-hash": {
       "types": "./dist/signup-invite-hash.d.ts",
       "import": "./dist/signup-invite-hash.js",