/**
 * lib/pending-invite.js — shared constants for the link-join "pending invite"
 * carry.
 *
 * When a member opens an invite link, the bearer token is stashed in this
 * short-lived httpOnly cookie (set by /api/auth/join-bootstrap) so it survives
 * the Supabase sign-in redirect, then redeemed by GET /api/orgs/join-complete.
 *
 * No node:* imports — safe to reference from route handlers and server pages.
 */

export const PENDING_INVITE_COOKIE = 'madarx_pending_invite';

/** 10 minutes — long enough to complete a sign-in, short enough to limit exposure. */
export const PENDING_INVITE_MAX_AGE = 600;
