verify-phone-sms 0.9.65 → 0.9.67
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CLAUDE.md +28 -0
- package/package.json +1 -1
package/CLAUDE.md
ADDED
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
# CLAUDE.md — `verify-phone-sms`
|
|
2
|
+
|
|
3
|
+
**skill:** [`skills/verify-phone-sms`](../../skills/verify-phone-sms/SKILL.md)
|
|
4
|
+
· **runner:** Vitest · **build:** none (`echo 'No build step needed for Workers'`)
|
|
5
|
+
|
|
6
|
+
SMS phone-verification API over **AWS SNS**, served by a **Hono** app on
|
|
7
|
+
Cloudflare Workers. Entry: `src/verify-phone.ts`.
|
|
8
|
+
|
|
9
|
+
## Rules — this one sends real messages that cost real money
|
|
10
|
+
|
|
11
|
+
- **Rate limiting and VoIP blocking are the product**, not overhead. An
|
|
12
|
+
unthrottled verification endpoint is an SMS-pumping target that bills the
|
|
13
|
+
operator. Never relax a limit to make a test pass.
|
|
14
|
+
- **Never log a code or a full phone number.** Codes are secrets with a short
|
|
15
|
+
life; numbers are personal data.
|
|
16
|
+
- Codes must be compared in constant time and expire. Verification attempts are
|
|
17
|
+
themselves rate-limited, separately from send.
|
|
18
|
+
- No build step — `src/*.ts` runs on Workers directly. Node-only APIs will pass
|
|
19
|
+
a Node test and fail in production.
|
|
20
|
+
|
|
21
|
+
## Layout
|
|
22
|
+
|
|
23
|
+
`src/verify-phone.ts` (entry) · `src/verify-phone-server.ts` ·
|
|
24
|
+
`src/identity-verification-server.ts` · `src/sns.ts` · `src/index.ts`
|
|
25
|
+
|
|
26
|
+
```bash
|
|
27
|
+
cd packages/verify-phone-sms && bun run test
|
|
28
|
+
```
|
package/package.json
CHANGED